OPTIV/SOURCE ZERO
Innovation and Research Around Technology and Security
The Source Zero platform is a community of Optiv’s skilled individuals doing research and sharing their expertise. The Source Zero Tools are resources that provide actionable support and demonstrations around research initiatives.
An attacker could use a poisoned docker image to break out of a container. Optiv is releasing REST API Goat, a vulnerable API, to help boost AppSec skills. Here is current analysis insight and a YARA rule to help you detect HiddenTear ransomware variants. How to prioritize efforts based on alert information from Microsoft Defender ATP, Logic Apps, and Log Analytics. Burp Suite’s Intruder tool can be used to automate testing for weak/default passwords. Talon automates a password guessing technique targeting Kerberos and LDAP within the Windows Active Directory environment. Talon automates a password guessing technique targeting Kerberos and LDAP within the Windows Active Directory environment. A how to guide using Gitlab, Hashicorp Terraform Cloud, AWS EKS and Palo Alto Networks Prisma Cloud to build and secure a Kubernetes cluster. The Visual Lock Picking Workstation is a Raspberry Pi enclosure which makes it possible to capture live video from a cutaway lock. The Visual Lock Picking Workstation displays the inner workings of a lock while teaching lock picking. Azure API Management Tracing Helper is a Burp Suite extension to aid in testing APIs hosted on the Azure API Management platform. This paper explores the Burp Suite extension for Azure API Management to automatically identify gateway misconfigurations and to display the tracing....
-
Copyright © 2020 Optiv Security Inc. All rights reserved.
-
No license, express or implied, to any intellectual property or other content is granted or intended hereby.
-
This blog is provided to you for information purposes only. While the information contained in this site has been obtained from sources believed to be reliable, Optiv disclaims all warranties as to the accuracy, completeness or adequacy of such information.
-
Links to third party sites are provided for your convenience and do not constitute an endorsement by Optiv. These sites may not have the same privacy, security or accessibility standards.
-
Complaints / questions should be directed to Legal@optiv.com