ScarletOps

Featured Articles

Below are some of the most recent ScarletOps publications released to our War Stories blog

Popping PRTG

Discovering a previously patched vulnerability which was later re-introduced into the Paessler PRTG Network Monitor codebase

FortiCracking

Pillaging various types of credentials and secrets from improperly secured Fortinet FortiGate firewall configuration backup files

RIP ADT

Exploring the pitfalls of a home security system from the "#1 smart alarm systems provider" and laying such bold claims to rest

Reversing FaciliWorks

Post-compromise analysis of the FaciliWorks web application to develop a tool for decrypting its application and database credentials

[ coming soon ]

PrivMan Parsing

Querying the Arellia/Thycotic/Delinea Privilege Manager agent SQLite database for escalation opportunities on compromised endpoints

[ coming soon ]

Not a Switch

Pushing the envelope on "device drops" during physical intrusion operations by hiding our hacking gear inside a Cisco switch chassis

[ coming soon ]

Ransomware Realities

Practical approaches to determining the efficacy of your endpoint security agent's anti-ransomware capabilities

[ coming soon ]

Entrustworthy 2FA

Reversing the Entrust Soft Token application for Windows to develop a tool for recovering the OTP secret from compromised endpoints

[ coming soon ]

Custom vs OTS

Choosing between custom-built and off-the-shelf components when determining your team's offensive toolkit strategy

[ coming soon ]

READY FOR NEXT STEPS?

Reach out today to see if our services are the right fit for your organization!

Get In Touch