BLOG

Komodo Research

Playing with Connected Files: a story of mysterious behavior in Windows file-system

A while back, I was working on some offline HTML files using Microsoft’s Office Word for some side project. I simply created an empty...

1,456 views0 comments

Komodo Research

WHY RED-TEAM?

What is Security Red-Team? A security red-team is a test that aims to assess the security level of an organization, identify main weaknesses

Komodo Research

Bypassing CrowdStrike in an Enterprise Production Network [in 3 Different Ways]

EDR solutions and specifically CrowdStrike Falcon are giving us a hard time recently. It seemed that no matter how covert we tried to be,...

50,967 views1 comment

Komodo Research

When all else fails - find a 0-day

How a failing red-team engagement led us to find a silly zero day. And why “insecure by default” is still an issue in 2019.

Komodo Research

Is MIME Sniffing XSS a real thing? [The story of weird Google bug bounties]

Let’s start at the end. This one got me seriously confused. It all started a few months ago when a colleague was hacking away at some...

5,951 views0 comments

Komodo Research

Through the cloud – remote debugging to crack MQ

In a simple penetration test the tester is presented with a target, say a web application, and attacks it from his workstation. However,...