PENTESTING SECRETS

Exploits Explained

The Exploits Explained series features technical vulnerability insights from the elite security researchers on the Synack Red Team. It offers a vetted forum for this global community of hackers to share the discovery of real-world vulns, offer tips for uncovering common exploit paths and unpack their use of GenAI tools.

Read Now

Exploits Explained: Default Credentials Still a Problem Today](/content/exploits-explained/default-credentials-still-a-problem-today/index.html)

Exploits Explained: Java JMX’s Exploitation Problems and Resolutions](/content/exploits-explained/exploits-explained-java-jmxs-exploitation-problems-and-resolutions/index.html)

Exploits Explained: Second Order XXE Exploitation](/content/exploits-explained/exploits-explained-second-order-xxe-exploitation/index.html)

Account Takeovers: Believe the Unbelievable](/content/exploits-explained/account-takeovers-believe-the-unbelievable/index.html)

Exploits Explained: A Spy’s Perspective On Your Network](/content/exploits-explained/exploits-explained-a-spys-perspective-on-your-network/index.html)

Exploits Explained: 5 Unusual Authentication Bypass Techniques](/content/exploits-explained/exploits-explained-5-unusual-authentication-bypass-techniques/index.html)

Why the newly discovered Microsoft Windows ‘fileless’ log exploit is a marvel of stealth](/content/exploits-explained/why-the-newly-discovered-microsoft-windows-fileless-log-exploit-is-a-marvel-of-stealth/index.html)

Researchers Uncover Record Number of Zero-Days. That’s Actually Good News.](/content/exploits-explained/researchers-uncover-record-number-of-zero-days-thats-actually-good-news/index.html)

Exploits Explained: NoSQL Injection Returns Private Information](/content/exploits-explained/exploits-explained-nosql-injection-returns-private-information/index.html)

What’s the Spring4Shell Vulnerability and Why it Matters](/content/exploits-explained/whats-the-spring4shell-vulnerability-and-why-it-matters/index.html)

Preventing Cryptographic Failures: The No. 2 Vulnerability in the OWASP Top 10](/content/exploits-explained/preventing-cryptographic-failures-the-no-2-vulnerability-in-the-owasp-top-10/index.html)

The Lapsus$ Threat Reinforces Critical Need to Secure Your Supply Chain](/content/exploits-explained/lapsus-supply-chain/index.html)

Path Traversal Paradise](/content/exploits-explained/path-traversal-paradise/index.html)

Preventing Broken Access Control: The No.1 Vulnerability in the OWASP Top 10 2021](/content/exploits-explained/preventing-broken-access-control-the-no-1-vulnerability-in-the-owasp-top-10-2021/index.html)

This Microsoft Windows RCE Vulnerability Gives an Attacker Complete Control](/content/exploits-explained/this-microsoft-windows-rce-vulnerability-gives-an-attacker-complete-control/index.html)

Guest Blog: SSRF using XSS in a Constrained Environment](/content/exploits-explained/guest-blog-ssrf-using-xss-in-a-constrained-environment/index.html)