SilentGrid Security

Delivering advanced offensive security services

[SilentGrid Security @SilentGrid]

New from Richard Tan.

Your AI assistant said no. Its tools already exposed the data.

In testing, the model refused five times. The tool still ran every time.

https://t.co/kmeV1Mo0vW

[SilentGrid Security @SilentGrid]

One of our Senior Consultant delves into the essentials of the Modbus protocol, commonly used in Industrial Control Systems (ICS), through a hands-on lab using OpenPLC📑

Check out his article which discusses security concerns and some recommendations.

https://t.co/jopSijLctB

[SilentGrid Security @SilentGrid]

Blueprint LMS Blind SQL Injection: our consultant Ronald shows how he exploited the vulnerability with a custom Python script (PoC included).

https://t.co/msubzIVVVE

[SilentGrid Security @SilentGrid]

@danonit Thanks Daniel, we appreciate your feedback!

[SilentGrid Security @SilentGrid]

New Blog Post! Dan shows how we disabled a well-known application whitelisting software and escalated our local privileges by exploiting an environment-specific configuration issue. https://t.co/AsFHFOsroc

[SilentGrid Security @SilentGrid]

Come join SilentGrid!

We're currently looking for a talented penetration tester who enjoys the challenges of breaking software and sneaking into our clients' networks undetected. Remote working, flexible working hours, 20% research time and yearly training budget!

[SilentGrid Security @SilentGrid]

Advisory and proof of concept for a vulnerability we found a while ago in Hexagon's GeoMedia WebMap 2020. https://t.co/hWAOKV2Vih

[SilentGrid Security @SilentGrid]

We've collected some data on scanning activities in the wild from the target's perspective.
https://t.co/W2gVMcfdCn

[TrendAI Zero Day Initiative @thezdi]

Want to know how to exploit the recently patched #Microsoft #Exchange CVE-2020-0688? @hexkitchen provides the details on how to take advantage of the fixed cryptographic keys used during installation. https://t.co/N7fds4do5s

[SilentGrid Security @SilentGrid]

Walkthrough of a vulnerability in a Borland product and how we used information gathered from a CVE to write a proof of concept exploit. https://t.co/twHrePb3Jk

[SilentGrid Security @SilentGrid]

@VolkisAU Hey! good to meet you guys :)

[SilentGrid Security @SilentGrid]

Hello, World!