VelloSec

Blog

Donec sollicitudin molestie malesuada. Vivamus magna justo, lacinia eget consectetur sed, convallis at tellus. Proin eget tortor risus.

Incident Response

Donec sollicitudin molestie malesuada. Vivamus magna justo, lacinia eget consectetur sed, convallis at tellus. Proin eget tortor risus.

Resources

Donec sollicitudin molestie malesuada. Vivamus magna justo, lacinia eget consectetur sed

Vulnerability Management

Donec sollicitudin molestie malesuada. Vivamus magna justo, lacinia eget consectetur sed

Certifications

Donec sollicitudin molestie malesuada. Vivamus magna justo, lacinia eget consectetur sed

Sollicitudin Sed

Donec sollicitudin molestie malesuada. Vivamus magna justo, lacinia eget consectetur sed

From the blog

Get Certified!

by VelloSec | July 6, 2020 | Certifications | 0 Comments

Check out our certification resources! Click here to check out some tips and tricks for passing some of the best industry certifications out there. Currently, the following guides are available: Offensive Security Certified Professional Offensive Security Certified...

Carving shellcode using restrictive character sets

by VelloSec | August 26, 2018 | Exploit Development | 0 Comments

When you are developing exploits, there are times when you will come across restrictive character sets, which may limit the characters that you are able use in your shellcode. Fortunately, there are ways to overcome this restriction. You are probably familiar with the...

Simple x86 Assembly to shellcode script

by VelloSec | August 26, 2018 | Exploit Development | 0 Comments

Instead of running running the commands to dump shellcode from assembly code that I write, I made a very simple script to help speed it up a bit. This isn't anything fancy, but it works for me. Essentially what it does: -Compile assembly with nasm -Linking with ld...

x86 Assembly Short and Conditional Jump Cheat Sheet

by VelloSec | August 26, 2018 | Exploit Development | 1 Comment

Now that I've wrapped up Offensive Security's Cracking the Perimeter course and obtained my OSCE certification, I figured I'd start giving back to the community some of the stuff that helped me along the way. Two websites that I found particularly useful were: Using...

VMware Releases Security Updates for Multiple Products on July 10, 2020 at 2:51 pm

by | July 10, 2020 | Security Alerts | 0 Comments

Original release date: July 10, 2020VMware has released security updates to address a vulnerability in VMware Fusion, Remote Console, and Horizon Client. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and...

Juniper Networks Releases Security Updates for Multiple Products on July 9, 2020 at 3:57 pm

by | July 9, 2020 | Security Alerts | 0 Comments

Original release date: July 9, 2020Juniper Networks has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and...

Citrix Releases Security Updates on July 8, 2020 at 1:32 pm

by | July 8, 2020 | Security Alerts | 0 Comments

Original release date: July 8, 2020Citrix has released security updates to address vulnerabilities in Citrix ADC (formerly known as NetScaler ADC), Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP appliance. A remote attacker could exploit...

VMware Releases Security Update for VeloCloud on July 8, 2020 at 1:34 pm

by | July 8, 2020 | Security Alerts | 0 Comments

Original release date: July 8, 2020VMware has released a security update to address a vulnerability in VeloCloud. An attacker could exploit this vulnerability to obtain sensitive information. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users...

CISA Releases Securing Industrial Control Systems: A Unified Initiative on July 7, 2020 at 3:12 pm

by | July 7, 2020 | Security Alerts | 0 Comments

Original release date: July 7, 2020The Cybersecurity and Infrastructure Security Agency (CISA) has released its five-year industrial control systems (ICS) strategy: Securing Industrial Control Systems: A Unified Initiative. The strategy—developed in...

VMware Releases Security Updates for Multiple Products on June 24, 2020 at 3:05 pm

by | July 7, 2020 | Security Alerts | 0 Comments

Original release date: June 24, 2020VMware has released security updates to address multiple vulnerabilities in VMware ESXi, Workstation, Fusion, and Cloud Foundation. An attacker could exploit some of these vulnerabilities to take control of an affected system. The...

Microsoft Releases Security Updates for Windows 10, Windows Server on July 1, 2020 at 2:45 pm

by | July 7, 2020 | Security Alerts | 0 Comments

Original release date: July 1, 2020Microsoft has released security updates to address vulnerabilities in Windows 10 and Windows Server. These vulnerabilities could allow a remote attacker to take control of an affected system. The Cybersecurity and Infrastructure...

Netgear Router Vulnerabilities on June 29, 2020 at 7:44 pm

by | July 7, 2020 | Security Alerts | 0 Comments

Original release date: June 29, 2020Multiple Netgear router models contain vulnerabilities that a remote attacker can exploit to take control of an affected device. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators...

Palo Alto Releases Security Updates for PAN-OS on June 29, 2020 at 6:10 pm

by | July 7, 2020 | Security Alerts | 0 Comments

Original release date: June 29, 2020Palo Alto Networks has released security updates to address a vulnerability affecting the use of Security Assertion Markup Language in PAN-OS. An unauthenticated attacker with network access could exploit this vulnerability to...

Apache Releases Security Advisory for Apache Tomcat on June 26, 2020 at 12:40 pm

by | July 7, 2020 | Security Alerts | 0 Comments

Original release date: June 26, 2020 | Last revised: June 29, 2020The Apache Software Foundation has released a security advisory to address a vulnerability in Apache Tomcat. An attacker could exploit this vulnerability to cause a denial-of-service condition. The...

Blog

Incident Response

Resources

Vulnerability Management

Certifications

Sollicitudin Sed

From the blog

US-Cert Alerts