invokesec

The best in offensive cybersecurity consulting and testing.

[invokesec @invokesec]

Excited to share our latest blog post! We poured a lot of heart into this one, exploring pivoting techniques and application template abuse through SolarWinds Orions. Hope it sparks some ideas or offers a fresh perspective.
https://t.co/sxKFJR8Yo8

[invokesec @invokesec]

While doing an assessment, we recently found a blind SQLi zero-day in DNNGos xBlog, a plugin for DNN or DotNetNuke. The issue has been patched so here's our blog post. Enjoy on a Friday afternoon! :) More great research to come...

https://t.co/qQ3vFEpnUv