Category: SANS Internet Storm Center, InfoCON: green

Risks of OOB Access via IP KVM Devices, (Mon, Jan 5th)

Recently, a new “breed” of IP-based KVM devices has been released. In the past, IP-based KVM devices required dedicated “server-grade” hardware using IPMI. They often cost several $100 per server, and are only available for specific systems that support the…

Read more →

Debugging DNS response times with tshark, (Fri, Jan 2nd)

One of my holiday projects was to redo and optimize part of my home network. One of my homelab servers failed in November. I had only thrown the replacement in the rack to get going, but some cleanup was needed. In…

Read more →

DLLs & TLS Callbacks, (Fri, Dec 19th)

Xavier's diary entry “Abusing DLLs EntryPoint for the Fun” inspired me to do some tests with TLS Callbacks and DLLs. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: DLLs & TLS Callbacks,…

Read more →

More React2Shell Exploits CVE-2025-55182, (Mon, Dec 15th)

Exploits for React2Shell (CVE-2025-55182) remain active. However, at this point, I would think that any servers vulnerable to the “plain” exploit attempts have already been exploited several times. Here is today's most popular exploit payload: This article has been indexed…

Read more →

Wireshark 4.6.2 Released, (Sun, Dec 14th)

Wireshark release 4.6.2 fixes 2 vulnerabilities and 5 bugs. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: Wireshark 4.6.2 Released, (Sun, Dec 14th)

Read more →

Abusing DLLs EntryPoint for the Fun, (Fri, Dec 12th)

In the Microsoft Windows ecosystem, DLLs (Dynamic Load Libraries) are PE files like regular programs. One of the main differences is that they export functions that can be called by programs that load them. By example, to call RegOpenKeyExA(), the…

Read more →