BLOG

Komodo Research

Jan 7, 20203 min read

A Practical Guide to SOC 2 Compliance

Komodo Research

Sep 10, 20193 min read

An Accidental SSRF Honeypot in Google Calendar

Komodo Research

Aug 8, 20193 min read

GitHub: The Red-Teamer’s Cheat-Sheet

Komodo Research

Jul 18, 20193 min read

Playing with Connected Files: a story of mysterious behavior in Windows file-system

Komodo Research

Jun 25, 20196 min read

WHY RED-TEAM?

Komodo Research

Jun 12, 20197 min read

Bypassing CrowdStrike in an Enterprise Production Network [in 3 Different Ways]

Komodo Research

May 30, 20193 min read

When all else fails - find a 0-day

Komodo Research

May 15, 20194 min read

Is MIME Sniffing XSS a real thing? [The story of weird Google bug bounties]

Komodo Research

Apr 25, 20193 min read

Through the cloud – remote debugging to crack MQ

Komodo Research

Apr 11, 20194 min read

AV WARS: Fighting fire with fire [AV Bypass Technique]

Komodo Research

Mar 25, 20193 min read

Google Groups Authorization Bypass / $500 bounty

Komodo Research

Mar 6, 20192 min read

BAD RABBIT – ARE YOU VULNERABLE ?

Komodo Research

Mar 2, 20194 min read

ATM JACKPOTTING USING FILELESS MALWARE

Komodo Research

Feb 14, 20194 min read

DISTRIBUTED VERIFICATION OF SSL CERTIFICATES

Komodo Research

Jan 13, 20193 min read

FROM PUSH NOTIFICATIONS TO A BOTNET

Komodo Research

Oct 2, 20182 min read

WHO IS RESPONSIBLE FOR DDOS ATTACKING US?

Komodo Research

Aug 15, 20182 min read

CYBER THREAT INTELLIGENCE – WHO NEEDS IT?

Komodo Research

May 17, 20185 min read

THE ARMY OF THE HEADLESS BROWSERS

Komodo Research

Mar 11, 20183 min read

FILELESS ADWARE VIA WEB PUSH NOTIFICATIONS

Komodo Research

Jan 12, 20184 min read

BLOG

A Practical Guide to SOC 2 Compliance

An Accidental SSRF Honeypot in Google Calendar

GitHub: The Red-Teamer’s Cheat-Sheet

Playing with Connected Files: a story of mysterious behavior in Windows file-system

WHY RED-TEAM?

Bypassing CrowdStrike in an Enterprise Production Network [in 3 Different Ways]

When all else fails - find a 0-day

Is MIME Sniffing XSS a real thing? [The story of weird Google bug bounties]

Through the cloud – remote debugging to crack MQ

AV WARS: Fighting fire with fire [AV Bypass Technique]

Google Groups Authorization Bypass / $500 bounty

BAD RABBIT – ARE YOU VULNERABLE ?

ATM JACKPOTTING USING FILELESS MALWARE

DISTRIBUTED VERIFICATION OF SSL CERTIFICATES

FROM PUSH NOTIFICATIONS TO A BOTNET

WHO IS RESPONSIBLE FOR DDOS ATTACKING US?

CYBER THREAT INTELLIGENCE – WHO NEEDS IT?

THE ARMY OF THE HEADLESS BROWSERS

FILELESS ADWARE VIA WEB PUSH NOTIFICATIONS

NOTIFICATION HIJACK: PERSISTENCY VIA REFLECTED XSS