Home | VerSprite Resources

Security Vulnerabilities

We are passionate about helping our clients chart a course that brings security and business together.

reverse-engineer

Blog Post

Microsoft Windows Vulnerabilities

Automating CVE-2019-1436 Variant Analysis: An Intro to Detecting Information Leaks via IDAPython

After investigating an information leak within Windows 10 in more detail, we decided to see how feasible it would be for an attacker to create an IDAPython script that could discover CVE-2019-1436 and other similar memory leaks automatically.

Learn more

Penetration Testing Methodology Emulating Realistic Attacks by a Malicious Actor

Blog Post

Penetration Testing Methodology: Emulating Realistic Attacks by a Malicious Actor

The foundation of VerSprite’s penetration testing methodology is based on emulating realistic attacks by a malicious actor through the use of PASTA (Process for Attack Simulation and Threat Analysis).

Learn more

Access Controls Named Pipes

Blog Post

Microsoft Windows Vulnerabilities

Part II: Analysis of a Vulnerable Microsoft Windows Named Pipe Application

In part II of this three-part series, we dive deeper into hands on examples of identifying usage of named pipe servers within applications using a custom vulnerable application. The methods covered to achieve this goal is through usage of both dynamic and static analysis.

Learn more

4 Fundamentals of Microsoft Windows Pipes

Blog Post

Security Vulnerabilities

Part I: The Fundamentals of Windows Named Pipes

In this three-part blog series, we will discuss the mechanics of Windows pipes and how they can be abused by attackers to gain privileged access.

Learn more

VerSprite Uncovers Silently Patched Information Leak Within Win32k Affecting Windows 10 v1709 to v1903

Blog Post

Exploitation of Vulnerabilities

Analyzing CVE-2019-1436 on Windows 10 v1903

VerSprite’s Research team uncovers silently patched information leak within Win32k Windows 10 v1709 to v1903. Exploitation of this vulnerability allows attackers to leak the value of win32kbase!gahDpiDepDefaultGuiFonts. Read the N-Day vulnerability and exploit analysis here.

Learn more

Secure Your Website: Simple HTTPS with Nginx

Blog Post

Security Vulnerabilities

Secure Your Website: Simple HTTPS with Nginx

Even if your organization is running a backend web service that doesn’t support HTTPS, there are still options to use HTTPS, such as using Let’s Encrypt and Nginx. Transport Layer Security (TLS) is very important to protect your website from malicious code injections.

Learn more

Google Cloud Security Scanner

Blog Post

Google Security

5 Techniques to Avoid Unwanted Outcomes with Cloud Security Scanner

Cloud Security Scanner checks for security vulnerabilities in your App Engine and Compute Engine web applications. It is designed to complement your existing secure design and development processes.

Learn more

Cloud Armor works as a multi-layer firewall for your GCP resources. To configure it, you must use Security Policies which are basically rules that allow or deny traffic from an IP or an IP range.

Blog Post

Identity and Access Management

How to Configure Google Cloud Armor as a Multi-Layer Firewall

In our three-part series Cloud Armor works as a multi-layer firewall for your GCP resources. To configure it, you must use Security Policies which are basically rules that allow or deny traffic from an IP or an IP range.

Learn more

Attacking LastPass: Compromising an Entire Password Database

Blog Post

Multi-Factor Authentication

Attacking LastPass: Compromising an Entire Password Database

LastPass is a commonly used cloud-based password management solution that stores hundreds of unique and strong passwords, but what if a user’s entire password database is compromised? While a cloud-based solution to password management is very convenient, it isn’t without its own set of dangers.

Learn more

We are an international squad of professionals working as one.

Email

[email protected]

logos