Rhino Security Labs

Strategic & Technical Blog

Technical Strategic Technical & Strategic Both
Research

CVE-2020-5377: Dell OpenManage Server Administrator File Read

David Yesland
March 9, 2021

This blog explores a file read vulnerability in Dell OpenManage Server Administrator (OMSA) we found during an internal network penetration test, tracked as CVE-2020-5377 and a bypass for the fix tracked as CVE-2021-21514. 
When this Dell…

Read more
AWS

Downloading and Exploring AWS EBS Snapshots

Cloud Security

CloudGoat ECS_EFS_Attack Walkthrough

Technical Strategic Technical & Strategic Both
Categories
Clear Selection
API
Application Security
AWS
Azure
Buyer's Guide
Cloud Security
Compliance
Enterprise Security
GCP
Google Cloud
Internet of Things
Mobile Security
Network Security
News
Penetration Testing
Research
Social Engineering
Tool Development
Uncategorized
Research

Java Deserialization Exploitation With
Customized Ysoserial Payloads

David Yesland

During a recent application assessment at Rhino we identified a Java deserialization vulnerability which ended up leading to unauthenticated remote code execution. Exploitation of the vulnerability turned out to not be as simple as…

Read more