Rhino Security Labs

Strategic Blog

Technical Strategic Technical & Strategic Both
Research

CloudGoat: New Scenario and Walkthrough (sns_secrets)

Tyler Ramsbey
October 15, 2024

This is a full walkthrough for the new sns_secrets scenario on CloudGoat. 
CloudGoat allows people to hone their cloud security skills by completing several “capture-the-flag” challenges. Full set-up instructions are on the CloudGoat…

Read more
Cloud Security

CloudGoat Official Walkthrough Series: ‘glue_privesc’

Research

Vestaboard: Exploring Broken Access Controls and Privilege Escalation

Technical Strategic Technical & Strategic Both
Categories
Clear Selection
Application Security
AWS
Azure
Buyer's Guide
Cloud Security
Compliance
Enterprise Security
GCP
Mobile Security
Network Security
News
Penetration Testing
Research
Social Engineering
Tool Development
Research

CVE-2024-1212:
Unauthenticated Command Injection
In Progress Kemp LoadMaster

David Yesland

While researching the Progress Kemp LoadMaster load balancer we discovered an unauthenticated command injection in the administrator web interface of the appliance. This allowed full compromise of the LoadMaster if you could reach the…

Read more