LABS
GITLAB RSS

TOADSEC LABS / OFFENSIVE SECURITY RESEARCH

Research notes.

For systems under test. CVEs, red team, malware, hardware, applications and CTF. Field notes from the lab, in one place.

ALL NOTES BY DATE
[HARDWARE] Debloat y launcher en un TV Android 11: investigación práctica 2026-11-03 · Jose Moreno [CVE] CVE-2021-36260: de RCE pre-auth a persistencia en cámaras Hikvision 2026-11-03 · Jose Moreno [MOBILE] Pentest en Android - SSL pinning Bypass con frida 2025-10-05 · Alejandro Torres [CVE] Langflow Security Alert: Understanding and Preventing a Critical Escalation Vulnerability 2025-09-07 · Jose Moreno [HARDWARE] ToadSec Badge RootedCON 2025-05-21 · Alejandro Torres [WIRELESS] Cómo hacer un bloqueador de señales Bluetooth, WiFi y más 2025-03-17 · Alejandro Torres [HARDWARE] Esp32 Marauder DIY 2024-11-08 · Alejandro Torres [CVE] CVE-2024-36401- RCE GeoServer 2024-09-12 · Eduardo Samaniego [HARDWARE] Programando el HackBat con MicroPython 2024-06-15 · Eduardo Chong [CVE] De la Mesa al Código: Un Viaje a Través de la Vulnerabilidad RCE en POS para Restaurantes 2024-02-13 · Jose Moreno [CTF] WriteUP CTF BSides Panamá 2024 2024-02-01 · José Navarro [CTF] Dragonjarctf2023 Reto Cripto 2023-10-24 · Eduardo Samaniego [CTF] El arte de construir un CTF – Estilo McGyver 2023-07-24 · Jose Moreno [APPSEC] Laboratorio de CI/CD Vulnerable 2023-07-14 · Jose Moreno [RED TEAM] Infraestructura de Red Team Segura 2023-01-30 · Jose Moreno [RED TEAM] Responsable Red Teaming - Terminal Logging 2023-01-12 · Jose Moreno [OSINT] Kamerka Herramienta de Reconocimiento para ICS 2022-12-29 · Jose Moreno [CRYPTO] Last Christmas I gave you my ETH - Day8 2022-12-14 · Jose Moreno [ICS] Attacking ICS 2022-12-08 · Jose Moreno [CLOUD] Lab Vulnerable utilizando AWS 2022-11-12 · Jose Moreno [LAB] HackTheBox - OpenSource - PrivEsc Using Git Hooks 2022-09-25 · José Navarro [CVE] Explotación Activa Sobre Zimbra CVE-2022-37042 (RCE Unauthenticated) 2022-09-23 · Jose Moreno [CVE] Análisis Vulnerabilidad CVE-2022-1040 (Sophos RCE) 2022-09-23 · Jose Moreno [APPSEC] Owasp API Top Ten 2022-06-12 · Jose Moreno [CRYPTO] Colisiones MD5 y SHA1 2022-06-12 · Jose Moreno [APPSEC] Gitlab-Exiftool-RCE (Authenticated) Writeup 2022-02-26 · Elzer Pineda [RED TEAM] Comand & Control Poshc2 2022-02-08 · Jose Moreno [WIRELESS] Pentest Wifi - Hack The Planet 2021-07-01 · Mr. X [WEB] Hack The Planet 1: From Zero to Site Admin, con un POST request y haciendome el loco 2021-05-21 · John Kent [HARDWARE] Printer Exploitation Toolkit 2021-05-19 · Jose Moreno [CVE] Fortigate VPN: CVE-2018-13379: Pre-auth arbitrary file reading 2021-05-08 · Jose Moreno [HARDWARE] Ruber Ducky DYI 2021-05-05 · Jose Moreno [APPSEC] Guía de instalacíon y configuracíon de OpenScap 2021-05-05 · Elzer Pineda [APPSEC] JWT Pentest 101 2021-05-05 · Jose Moreno

Topics: CVEs · Red team · Malware · Hardware · Applications · CTF

BY YEAR