Home | VerSprite Resources

Windows Security Vulnerabilities

We are passionate about helping our clients chart a course that brings security and business together.

Identifying a Userland Application’s Attack Surface on Windows

Upcoming Event

Security Vulnerabilities

VerSprite’s Security Research Consultant & VS-Labs Research Leader, Robert Hawes, will be presenting at the Wild West Hackin’ Fest. Robert’s presentation will cover how to perform attack surface enumeration concerning windows userland applications.

Learn more

Waves Maxx Audio DLL Side-Loading LPE via Windows Registry

Blog Post

Security Vulnerabilities

When performing vulnerability research, it is essential to make sure that all attack vectors concerning exploitation are exhausted. One avenue of exploitation comes from the Windows registry.

Learn more

Microsoft Windows Remote Code Execution (RCE) Vulnerability: BlueKeep

Blog Post

Exploitation of Vulnerabilities

On June 17, 2019 the Department of Homeland Security (DHS) issued an alert for the Microsoft Windows Remote Code Execution (RCE) vulnerability named BlueKeep and CVE-2019-0708.

Learn more

Microsoft Outlook for Android Vulnerable to Cross-Site Scripting

Blog Post

Microsoft published an advisory on a critical vulnerability found in the Microsoft Outlook Android application. The attack happens when an email is sent to the victim with an embedded hidden code.

Learn more

Mozilla Firefox Patches Multiple Zero Days

Blog Post

Web Application Security

Mozilla Firefox has patched multiple zero days that could lead to arbitrary code being executed remotely. The first vulnerability that was patched was a Universal Cross-site Scripting (UXSS) attack and worked on any Windows, MacOS and Linux device.

Learn more

Exploitation of Remote WCF Vulnerabilities

Blog Post

Exploitation of Vulnerabilities

In this blog, we’ll be discussing the discovery, analysis, and exploitation of CVE-2019-8917 which is a remotely exploitable WCF vulnerability that we discovered in SolarWinds Orion NPM 12.3.

Learn more

MiTM Attack Between Target Windows Machines and a DNS Server

Blog Post

Security Vulnerabilities

When performing this attack, we will find two different scenarios. #1: the attacker machine, the victim, and the DNS server are all in the same network segment. #2: the attacker machine is in the same network segment of the Windows victims and the DNS server is placed in another network segment.

Learn more

Windows Userland Application Attack Surface Enumeration

Blog Post

Inside the domain of vulnerability research, many different methodologies exist for how a researcher may start their journey with auditing an application. This blog provides information on how to enumerate the attack surface of userland applications that are deployed on the Windows operating system.

Learn more

Abusing Insecure Windows Communication Foundation (WCF) Endpoints

Presentation

Windows Security Vulnerabilities

A trend that the VerSprite Research team noticed in .NET services is the exposure of dangerous methods through insecure WCF endpoints. Download this presentation for a high-level overview of the WCF terminals and receive a practical analysis.

Learn more

We are an international squad of professionals working as one.

Email

[email protected]

logos