Blog

ManageEngine User Enumeration

Background:While conducting a penetration test of a client’s external network, I discovered a way to enumerate users’ in ManageEngine’s ADSelfService Plus application. This allows an

Read More »

The Pastebin Treasure Hunter

IntroductionMalicious actors have multiple ways to share data they have stolen from websites or services. Some might post to popular forums to gain notoriety while

Read More »