@foxglovesec
Joined May 2015
  • Tweets24
  • Following36
  • Followers1K
1Media
HP has released the security bulletin which addresses the vulnerability described in our blogpost support.hp.com/nz-en/documen…
2
6
We think HP should be more concerned with foxes than wolves - "A Sheep in Wolf's Clothing - Finding RCE in HP's Printer Fleet" by @breenmachine - foxglovesecurity.com/2017/11…

A Sheep in Wolf’s Clothing – Finding RCE in HP’s Printer Fleet

By @breenmachine   Sometimes the marketing department goes a little too far. Most of us who work in security have been there, non-technical people enthusiastic about selling the technical feat…

foxglovesecurity.com
4
99
1
110
Dropping @breenmachine and @dronesec latest Windows privilege escalation project - For exploit devs and pentesters - foxglovesecurity.com/2017/08…

Abusing Token Privileges For Windows Local Privilege Escalation

By @dronesec and @breenmachine   This a project my friend drone <@dronesec> and I have been poking at for quite some time and are glad to finally be releasing. As the title implies, we&#…

foxglovesecurity.com
5
217
6
265
New blogpost by @jstnkndy on abusing Type Juggling and PHP Object Injection to gain SQLi foxglovesecurity.com/2017/02…
2
130
5
130
New blogpost from @breenmachine on abusing JasperReports servers to get shells on a pentest foxglovesecurity.com/2016/10…

Hacking JasperReports – The Hidden Shell Feature

By @breenmachine A short while ago, my coworkers and I were working on a penetration test for a client with a fairly small Internet facing attack surface. One thing we did find was that they had le…

foxglovesecurity.com
21
23
New blog post about @breenmachine's Derby talk - Privilege Escalation from Service Accounts to SYSTEM in Windows foxglovesecurity.com/2016/09…
2
74
73
Our first PWNSchool event was a success! Anyone interested in hacking more bounties with us, sign up for round 2! pwnschool.wordpress.com/

What

Free and inclusive offensive security education by FoxGlove Security

pwnschool.wordpress.com
1
5
7
We're working on it ;)
1
New blog post by @BrandonPrry - Finding pearls; fuzzing ClamAV foxglovesecurity.com/2016/06…
1
31
26
Why DoS isn't compromise - 5 Years of Real Penetration Test Data to Stand Behind (foxglovesecurity.com/2016/05…)
17
18
New blog post, we hope it gives you the warm and fuzzies: foxglovesecurity.com/2016/03…

Fuzzing workflows; a fuzz job from start to finish

By @BrandonPrry   Many people have garnered an interest in fuzzing in the recent years, with easy-to-use frameworks like American Fuzzy Lop showing incredible promise and (relatively) low barr…

foxglovesecurity.com
18
18
New blog post, because who doesn't like getting cleartext credentials using wireless attacks? foxglovesecurity.com/2016/02…
2
17
22
Potato for Win10 updated, no more waiting for shells to pop! Shout out to @vvalien1 for the trigger! Now on Github.
2
56
61
New blog post and tool, codename "Potato", that will get you SYSTEM on Windows, get it while it's hot: foxglovesecurity.com/2016/01…

Hot Potato – Windows Privilege Escalation

By @breenmachine Privilege Escalation on Windows 7,8,10, Server 2008, Server 2012 … and a new network attack How it works Hot Potato (aka: Potato) takes advantage of known issues in Windows t…

foxglovesecurity.com
6
155
151
Welcome to the newest version of the @foxglovesec team @BrandonPrry !
3
1
Deserializing arbitrary user controlled content? IT'S UNIVERSALLY STUPID, MAN xitter.cf/foxglovesec/status/662…
FoxGlove Security@foxglovesec6 Nov 2015
What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability. foxglovesecurity.com/2015/11…

What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This...

By @breenmachine What? The most underrated, underhyped vulnerability of 2015 has recently come to my attention, and I’m about to bring it to yours. No one gave it a fancy name, there were no …

foxglovesecurity.com
4
3
What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability. foxglovesecurity.com/2015/11…

What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This...

By @breenmachine What? The most underrated, underhyped vulnerability of 2015 has recently come to my attention, and I’m about to bring it to yours. No one gave it a fancy name, there were no …

foxglovesecurity.com
6
82
66
Check out our new blog post - "Hack Like the Bad Guys – Using Tor for Firewall Evasion and Anonymous Remote Access" foxglovesecurity.com/2015/11…
5
4
Can confirm - more good content to come :) xitter.cf/botnet_hunter/status/6…
2
Check out our first blog post! The previously untold story of our remote car hacking 0-day foxglovesecurity.com/2015/10…

Car Hacking for Plebs – The Untold Story

By @breenmachine How bad web applications affect the security of your vehicle Update – 03 Nov 2015 After publishing this post, it came to our attention that a number of other researchers had …

foxglovesecurity.com
17
7
Load more