UNC1739
Offensive security research. Web exploitation. Red team tradecraft.
// featured research
Qlik Sense Vulnerability Chain (ZeroQlik / DoubleQlik)
HTTP request tunneling and path traversal vulnerabilities enabling unauthenticated remote code execution. Exploited by Cactus ransomware and Magnet Goblin. Added to CISA KEV catalog.
view all cves →// recent posts
Et Tu, Default Creds? Introducing Brutus for Modern Credential Testing
Introducing Brutus, a multi-protocol credential testing tool for penetration testers and red teams. Covers default credential validation, SSH bad key testing, and pipeline integration with modern reconnaissance workflows.
Beyond the Last Mile: How Internet Routing Shapes Red Team Ops
How Internet routing, peering relationships, and transit providers affect red team operations. Observations from tunneling traffic through web conferencing infrastructure.
Analyzing a Modern Linux Kernel Vulnerability (CVE-2023-0266)
Deep dive into a use-after-free vulnerability in the Linux kernel sound subsystem exploited in the wild against Android devices.