Rhino Security Labs

Strategic & Technical Blog

Technical Strategic Technical & Strategic Both
Penetration Testing

CVE-2022-25372:
Local Privilege Escalation in Pritunl VPN Client

David Yesland

The Pritunl VPN Client service is vulnerable to an arbitrary file write as SYSTEM on Windows. This is due to insecure directory permissions on the Pritunl ProgramData folder. The arbitrary file write is then able to be leveraged for full…

Read more
Penetration Testing

Java Deserialization Exploitation With
Customized Ysoserial Payloads

Penetration Testing

Fuzzing Left4Dead 2 with CERT’s
Basic Fuzzing Framework

Technical Strategic Technical & Strategic Both
Categories
Clear Selection
API
Application Security
AWS
Azure
Buyer's Guide
Cloud Security
Compliance
Enterprise Security
GCP
Google Cloud
Internet of Things
Mobile Security
Network Security
News
Penetration Testing
Research
Social Engineering
Tool Development
Uncategorized
Penetration Testing

Weaponizing AWS ECS Task Definitions
to Steal Credentials From Running Containers

Nick Spagnola

Using containers to host applications in cloud environments is an increasingly popular deployment model in AWS. Due to this trend, researchers at Rhino Security Labs explored how these containers can be abused to steal information or…

Read more