Atredis is a 100% worker-owned team of world-class security researchers and consultants. We do risk-centric, research-driven security testing and consulting.
"Bad News for the Average Pentester" ... But who wants to be average?
Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay.
https://t.co/10pnLMYU5M
We decided to revisit an old research problem with some new LLM powered tooling. Check out our latest blog post to see how we approached this research, and the new Java deserialization gadget chains it discovered in just two days! https://t.co/3kSWWl71W9
On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here https://t.co/oQjuRJQii4
Atredis identified a vulnerability in the way Rapid7's Nexpose was generating passwords to protect its Java KeyStore which is used to encrypt saved credentials. This vulnerability was reported to Rapid7 and a patch is being rolled out today! Details here: https://t.co/5zog8jhzN0
Command & Conquer'd: Worming RCEs through a classic multiplayer game. Check out the full writeup from our @DistrictCon Junkyard submission here:
https://t.co/Qo1Jy6a83M
By @dronesec and @jordan9001#Security#modding#rce
In case you missed it, be sure to watch Atredian Matt Burch's (@emptynebuli) @HackSpaceCon talk, Where's the Money: Defeating ATM Disk Encryption! https://t.co/eAu8o8CqTP
Check out our latest blog from Matt Burch (@emptynebuli) detailing new supplemental findings from his DefCon32 talk Where's the Money: Defeating ATM Disk Encryption: https://t.co/c4UOfY8obA
ICYMI, @synacktiv's Pwn2Own walkthrough, exploiting a Tesla Wall via the charging port is a good Friday read.
After a firmware downgrade, they found a debug shell via the access point used during setup, ultimately using this to gain EIP.
https://t.co/8YWtMcqZcP
We recently identified a number of privilege escalation vulnerabilities in Lenovo Vantage on Windows; check out our latest blog for a technical deep dive https://t.co/rhXAaN4Hjn
Sam wanted to answer the question "can you 3D print pogo pin harnesses?" So, he ran some experiments this week to find out.
Check out the blog post and grab the models to try for yourself!
https://t.co/pgVdmBEh7R
#pogopin#probe#3dprinting#atredis
Don't miss @emptynebuli presenting at @hackspacecon in Cape Canaveral on May 14th! ๐ฐ ๐ No ticket? No Problem! ๐ We have a few extra ๐ Reply to the post and we will hook you up!
https://t.co/wadJh9TNJk