Post

Research Worth Reading - Week 5, 2026 Bugs EVERYWHERE….

🪟 Corrupting the Hive Mind: Persistence Through Forgotten Windows Internals The team from Praetorian is sharing a new tool that will surely be added to your Windows Red Team arsenal: www.praetorian.com/blog/corrupt...

praetorian.comCorrupting the Hive Mind: Persistence Through Forgotten Windows InternalsSwarmer enables stealthy Windows registry persistence by exploiting mandatory user profiles and the Offline Registry API to bypass EDR detection. Learn how this technique leverages NTUSER.MAN files to...

PentesterLab

@pentesterlab.com

␛ On the clock: Escaping VMware Workstation at Pwn2Own Berlin 2025 Who doesn’t like a good Pwn2Own story, the sentence "Convinced that exploitation would be straightforward, we spent the second month procrastinating." especially hurts: www.synacktiv.com/en/publicati...

synacktiv.comOn the clock: Escaping VMware Workstation at Pwn2Own Berlin 2025On the clock: Escaping VMware Workstation at Pwn2Own Berlin 2025

2/2/26, 12:26 am0 reposts0 likes

PentesterLab

@pentesterlab.com

2 Feb

🪲 Insecure Defaults Detection Trail of Bits is sharing more and more skills. This one to detect: github.com/trailofbits/...

✨ Samstung Part 2 :: Remote Code Execution in MagicINFO 9 Server Steven Seeley is back with a new blog post and walks us through two bugs with source code to follow: srcincite.io/blog/2026/01...

srcincite.ioSamstung Part 2 :: Remote Code Execution in MagicINFO 9 ServerIn part 1 I detailed my approach to following a rabbit hole that almost turned into pre-auth remote code execution with a default setup. Although I didn’t ac...

PentesterLab

@pentesterlab.com

2 Feb

🪲 CVE-2026-23993: JWT authentication bypass in HarbourJwt via “unknown alg” I hope no one will mind that I put my own content in there. I^WClaude found a JWT bypass in HarbourJwt: pentesterlab.com/blog/cve-202...

pentesterlab.comCVE-2026-23993: JWT authentication bypass in HarbourJwt via “unknown alg”Deep dive into CVE-2026-23993: HarbourJwt accepts forged JWTs when alg is unknown, bypassing signature checks via empty signatures. Fix + code review lessons.