Rhino Security Labs

Technical Blog

Technical Strategic Technical & Strategic Both
Research

Referral Beware, Your Rewards are Mine (Part 1)

Whit Taylor

Referral rewards programs are nearly ubiquitous today, from consumer tech to SaaS companies, but are rarely given much security oversight. In this blog post we’ll dig into the common technical implementations of rewards programs on…

Read more
Research

Multiple CVEs in Infoblox NetMRI: RCE, Auth Bypass, SQLi, and File Read Vulnerabilities  

Research

CVE-2025-26147: Authenticated RCE In Denodo Scheduler 

Technical Strategic Technical & Strategic Both
Categories
Clear Selection
API
Application Security
AWS
Azure
Buyer's Guide
Cloud Security
Compliance
Enterprise Security
GCP
Google Cloud
Internet of Things
Mobile Security
Network Security
News
Penetration Testing
Research
Social Engineering
Tool Development
Uncategorized
Tool Development

New Pacu Module:
Secret Enumeration in Elastic Beanstalk

Tyler Ramsbey

During a recent AWS penetration test, the client was using a service I do not see very often: AWS Elastic Beanstalk (EBN). This is a service that makes it easy to deploy web applications without managing the underlying infrastructure. The…

Read more