❌

Normal view

There are new articles available, click to refresh the page.
Before yesterdayBlack Hills Information Security

Malicious Outlook Rule without an EXE

✇Black Hills Information Security
By: BHIS
20 December 2016 at 11:16

 Carrie Roberts // My current favorite exploit is creating malicious outlook rules as described here. The rule is configured to download an executable file with an EXE extension (.exe) when an […]

The post Malicious Outlook Rule without an EXE appeared first on Black Hills Information Security, Inc..

Malicious Outlook Rules in Action

✇Black Hills Information Security
By: BHIS
29 November 2016 at 10:01

 Carrie Roberts // Getting a shell using a malicious Outlook rule is an awesome tool during a pentest and great fun! Nick Landers had a great post including enough information to make […]

The post Malicious Outlook Rules in Action appeared first on Black Hills Information Security, Inc..

Deploying a WebDAV Server

✇Black Hills Information Security
By: BHIS
9 November 2016 at 15:41

Carrie Roberts // There are various reasons why having a webDAV server comes in handy. The main reason I created one was to execute a malicious Outlook rule attack as […]

The post Deploying a WebDAV Server appeared first on Black Hills Information Security, Inc..

Bypassing Two-Factor Authentication on OWA & Office365 Portals

✇Black Hills Information Security
By: BHIS
2 November 2016 at 11:00

Beau Bullock // Full Disclosure: Black Hills Information Security believes in responsible disclosure of vulnerabilities. This vulnerability was reported to Microsoft on September 28th, 2016. As of the publication date of […]

The post Bypassing Two-Factor Authentication on OWA & Office365 Portals appeared first on Black Hills Information Security, Inc..

❌
❌