red team – YLabs

The Foreigner – A (not so) quick and dirty drop box for Red Teamers

Some time ago, the Yarix Red Team was engaged on a red team assessment that included an onsite activity to test the physical security posture of the Customer. Although we would have used social engineering tactics to physically enter the Customer property, this would have given us a too short amount of time to stay...

29/12/2022By YlabsRead more...

Analysis of a Command Injection in VBScript

In this writeup we present the analysis and exploitation of a VBScript command injection vulnerability we stumbled upon during a penetration test on a .NET web application. What makes this vulnerability stand out is the fact that at first glance it could be mistaken for a common SQL injection. After a few exploitation attempts, we...

14/07/2022By YlabsRead more...

Tag - red team

The Foreigner – A (not so) quick and dirty drop box for Red Teamers

Analysis of a Command Injection in VBScript