https://trustfoundry.net/blog Original security research, vulnerability disclosures, and technical deep-dives from the TrustFoundry penetration testing team. en-us Wed, 30 Apr 2025 12:00:00 GMT https://trustfoundry.net/blog/pentesting-pdq-deploy-and-inventory https://trustfoundry.net/blog/pentesting-pdq-deploy-and-inventory Wed, 30 Apr 2025 12:00:00 GMT Toby Jackson Windows & Active Directory Deep dive into penetration testing PDQ Deploy and Inventory: why deployment systems are critical Tier 0 assets that require dedicated security attention. https://trustfoundry.net/blog/kerberoasting-as-reproastable-user https://trustfoundry.net/blog/kerberoasting-as-reproastable-user Fri, 04 Apr 2025 12:00:00 GMT Thomas Fieber Windows & Active Directory Kerberos ticket abuse remains a significant security issue for organizations using Active Directory. Exploring real-world Kerberoasting attack chains through AS-REP roastable accounts. https://trustfoundry.net/blog/browser-exploitation-addrof-fakeobj https://trustfoundry.net/blog/browser-exploitation-addrof-fakeobj Fri, 28 Mar 2025 12:00:00 GMT Josiah Pierce Exploit Development Explaining the fundamental primitives behind JavaScript engine exploitation, addrof and fakeobj, and why they matter for understanding browser security vulnerabilities. https://trustfoundry.net/blog/spot-the-bug-challenge-2 https://trustfoundry.net/blog/spot-the-bug-challenge-2 Fri, 21 Mar 2025 12:00:00 GMT Josiah Pierce Exploit Development Test your vulnerability-spotting skills with our second Spot the Bug challenge. https://trustfoundry.net/blog/spot-the-bug-challenge-1 https://trustfoundry.net/blog/spot-the-bug-challenge-1 Wed, 12 Mar 2025 12:00:00 GMT Josiah Pierce Exploit Development Can you spot the security vulnerability? Our first interactive Spot the Bug challenge for security professionals. https://trustfoundry.net/blog/burpsuite-ai-features https://trustfoundry.net/blog/burpsuite-ai-features Mon, 03 Mar 2025 12:00:00 GMT Toby Jackson Web & App Security An honest look at BurpSuite's new AI-powered features and whether they live up to the hype for penetration testers. https://trustfoundry.net/blog/jit-vulnerabilities-javascript-engines https://trustfoundry.net/blog/jit-vulnerabilities-javascript-engines Tue, 14 Jan 2025 12:00:00 GMT Josiah Pierce Exploit Development An accessible introduction to Just-in-Time compilation vulnerabilities in JavaScript engines and their relevance to browser security. https://trustfoundry.net/blog/harnessing-blockchain-for-secure-and-transparent-elections https://trustfoundry.net/blog/harnessing-blockchain-for-secure-and-transparent-elections Mon, 06 Jan 2025 12:00:00 GMT Alex Archondakis Career & Company Exploring how blockchain technology can be applied to create more secure and transparent election systems. https://trustfoundry.net/blog/enumerating-access-for-aws-temporary-credentials https://trustfoundry.net/blog/enumerating-access-for-aws-temporary-credentials Tue, 17 Dec 2024 12:00:00 GMT Alex Archondakis Cloud Techniques for enumerating the access and permissions associated with AWS temporary credentials during penetration tests. https://trustfoundry.net/blog/practical-guide-confidential-computing https://trustfoundry.net/blog/practical-guide-confidential-computing Wed, 11 Dec 2024 12:00:00 GMT Alex Lauerman Cloud A practical overview of confidential computing — what it is, how it works, and why it matters for securing sensitive workloads in the cloud. https://trustfoundry.net/blog/prompt-injection-stopping-attacks-at-the-source https://trustfoundry.net/blog/prompt-injection-stopping-attacks-at-the-source Wed, 18 Sep 2024 12:00:00 GMT Ethan Finn Web & App Security A deep dive into prompt injection vulnerabilities in AI/LLM applications and strategies for mitigating them at the source. https://trustfoundry.net/blog/understanding-active-directory-certificate-services-esc1-esc8 https://trustfoundry.net/blog/understanding-active-directory-certificate-services-esc1-esc8 Mon, 19 Aug 2024 12:00:00 GMT Thomas Fieber Windows & Active Directory A focused look at Active Directory Certificate Services misconfigurations, specifically the ESC1 and ESC8 attack vectors. https://trustfoundry.net/blog/a-quick-introduction-to-postmessage-xss https://trustfoundry.net/blog/a-quick-introduction-to-postmessage-xss Tue, 30 Jul 2024 12:00:00 GMT Josiah Pierce Web & App Security An introduction to cross-site scripting vulnerabilities via the postMessage API and how to identify and exploit them. https://trustfoundry.net/blog/firefox-sandbox-vulnerability-research https://trustfoundry.net/blog/firefox-sandbox-vulnerability-research Thu, 11 Apr 2024 12:00:00 GMT Josiah Pierce Exploit Development Setting up a research environment for Firefox sandbox vulnerability research, covering the tools and techniques needed to get started. https://trustfoundry.net/blog/preparing-for-a-technical-interview-as-a-penetration-tester https://trustfoundry.net/blog/preparing-for-a-technical-interview-as-a-penetration-tester Thu, 04 Apr 2024 12:00:00 GMT Alex Archondakis Career & Company Practical advice and tips for preparing for technical interviews in the penetration testing field. https://trustfoundry.net/blog/comprehensive-guide-to-http-security-headers https://trustfoundry.net/blog/comprehensive-guide-to-http-security-headers Thu, 21 Mar 2024 12:00:00 GMT Alex Archondakis Web & App Security A thorough guide to HTTP security headers, what they do, and how to implement them to protect web applications. https://trustfoundry.net/blog/burpsuite-certified-practitioner-exam-review https://trustfoundry.net/blog/burpsuite-certified-practitioner-exam-review Thu, 14 Mar 2024 12:00:00 GMT Alex Archondakis Career & Company A review of the BurpSuite Certified Practitioner exam, including preparation tips and what to expect. https://trustfoundry.net/blog/securing-session-cookies https://trustfoundry.net/blog/securing-session-cookies Thu, 07 Mar 2024 12:00:00 GMT Alex Archondakis Web & App Security Best practices for securing session cookies in web applications, covering flags, attributes, and common pitfalls. https://trustfoundry.net/blog/making-the-most-out-of-your-penetration-test https://trustfoundry.net/blog/making-the-most-out-of-your-penetration-test Thu, 29 Feb 2024 12:00:00 GMT Alex Archondakis Career & Company How to maximize the value of your penetration test engagement, from scoping to remediation. https://trustfoundry.net/blog/writing-an-exploit-for-cve-2021-4034 https://trustfoundry.net/blog/writing-an-exploit-for-cve-2021-4034 Fri, 04 Mar 2022 12:00:00 GMT Josiah Pierce Exploit Development A walkthrough of writing an exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in Polkit's pkexec. https://trustfoundry.net/blog/did-default-samesitelax-put-the-nail-in-the-coffin-for-csrf https://trustfoundry.net/blog/did-default-samesitelax-put-the-nail-in-the-coffin-for-csrf Wed, 16 Feb 2022 12:00:00 GMT Tyler Rosonke Web & App Security Examining whether the default SameSite=Lax cookie attribute has eliminated CSRF vulnerabilities, and the edge cases where it hasn't. https://trustfoundry.net/blog/writing-basic-offensive-tooling-in-nim https://trustfoundry.net/blog/writing-basic-offensive-tooling-in-nim Mon, 01 Mar 2021 12:00:00 GMT Josiah Pierce Tooling & Tradecraft An introduction to using the Nim programming language for developing basic offensive security tools. https://trustfoundry.net/blog/a-brief-introduction-to-semgrep-part-1 https://trustfoundry.net/blog/a-brief-introduction-to-semgrep-part-1 Thu, 29 Oct 2020 12:00:00 GMT Alex Lauerman Tooling & Tradecraft Part 1 of our introduction to Semgrep, covering the basics of this lightweight static analysis tool for security-focused code review. https://trustfoundry.net/blog/a-brief-introduction-to-semgrep-part-2 https://trustfoundry.net/blog/a-brief-introduction-to-semgrep-part-2 Thu, 29 Oct 2020 12:00:00 GMT Josiah Pierce Tooling & Tradecraft Part 2 of our introduction to Semgrep, a lightweight static analysis tool for finding bugs and enforcing code standards. https://trustfoundry.net/blog/preparing-for-an-application-penetration-test https://trustfoundry.net/blog/preparing-for-an-application-penetration-test Wed, 05 Aug 2020 12:00:00 GMT Alex Lauerman Career & Company A guide for organizations on how to prepare for an application penetration test to ensure the best results. https://trustfoundry.net/blog/passwords-are-dead-long-live-webauthn https://trustfoundry.net/blog/passwords-are-dead-long-live-webauthn Fri, 14 Feb 2020 12:00:00 GMT Matt South Web & App Security An exploration of WebAuthn and the FIDO2 standard as a modern replacement for password-based authentication. https://trustfoundry.net/blog/introduction-to-triaging-fuzzer-generated-crashes https://trustfoundry.net/blog/introduction-to-triaging-fuzzer-generated-crashes Wed, 22 Jan 2020 12:00:00 GMT Josiah Pierce Exploit Development A practical introduction to triaging crashes generated by fuzzers, covering tools and techniques for root cause analysis. https://trustfoundry.net/blog/scanning-at-scale-burp-suite-enterprise-edition https://trustfoundry.net/blog/scanning-at-scale-burp-suite-enterprise-edition Tue, 15 Oct 2019 12:00:00 GMT Bucky Spires Tooling & Tradecraft A review of Burp Suite Enterprise Edition and its capabilities for scaling web application security scanning. https://trustfoundry.net/blog/top-8-burp-suite-extensions https://trustfoundry.net/blog/top-8-burp-suite-extensions Tue, 01 Oct 2019 12:00:00 GMT Matt South Tooling & Tradecraft A curated list of the top 8 Burp Suite extensions for web application penetration testing. https://trustfoundry.net/blog/using-iodine-for-dns-tunneling-c2 https://trustfoundry.net/blog/using-iodine-for-dns-tunneling-c2 Mon, 12 Aug 2019 12:00:00 GMT Josiah Pierce Tooling & Tradecraft How to use Iodine for DNS tunneling to establish command and control channels that bypass egress filtering. https://trustfoundry.net/blog/basic-rop-techniques-and-tricks https://trustfoundry.net/blog/basic-rop-techniques-and-tricks Thu, 18 Jul 2019 12:00:00 GMT Josiah Pierce Exploit Development An introduction to Return-Oriented Programming (ROP) techniques and tricks for binary exploitation. https://trustfoundry.net/blog/cve-2019-7629-rce-in-an-open-source-mud-client https://trustfoundry.net/blog/cve-2019-7629-rce-in-an-open-source-mud-client Mon, 18 Feb 2019 12:00:00 GMT Nick Fox Exploit Development Disclosure and analysis of CVE-2019-7629, a remote code execution vulnerability in an open source MUD client. https://trustfoundry.net/blog/2018-customer-survey-results https://trustfoundry.net/blog/2018-customer-survey-results Mon, 28 Jan 2019 12:00:00 GMT Alex Lauerman Career & Company Results from our 2018 customer satisfaction survey and insights into what our clients value most. https://trustfoundry.net/blog/bypassing-wafs-with-json-unicode-escape-sequences https://trustfoundry.net/blog/bypassing-wafs-with-json-unicode-escape-sequences Thu, 20 Dec 2018 12:00:00 GMT Tyler Rosonke Web & App Security Techniques for bypassing Web Application Firewalls using JSON Unicode escape sequences to smuggle payloads. https://trustfoundry.net/blog/jwt-hacking-101 https://trustfoundry.net/blog/jwt-hacking-101 Fri, 08 Dec 2017 12:00:00 GMT Tyler Rosonke Web & App Security An introduction to JSON Web Token security, common vulnerabilities, and exploitation techniques. https://trustfoundry.net/blog/honeypi-easy-honeypot-raspberry-pi https://trustfoundry.net/blog/honeypi-easy-honeypot-raspberry-pi Tue, 22 Aug 2017 12:00:00 GMT Matt South Tooling & Tradecraft How to set up a simple and effective honeypot using a Raspberry Pi for network intrusion detection. https://trustfoundry.net/blog/exe-hijacking-git-bash-windows https://trustfoundry.net/blog/exe-hijacking-git-bash-windows Sun, 30 Oct 2016 12:00:00 GMT Matt South Windows & Active Directory Demonstrating EXE hijacking vulnerabilities in Git Bash for Windows and their security implications. https://trustfoundry.net/blog/what-is-dll-hijacking https://trustfoundry.net/blog/what-is-dll-hijacking Wed, 19 Oct 2016 12:00:00 GMT Matt South Windows & Active Directory An explanation of DLL hijacking attacks, how they work, and how to defend against them. https://trustfoundry.net/blog/referer-redirection-inconspicuous-danger https://trustfoundry.net/blog/referer-redirection-inconspicuous-danger Tue, 23 Aug 2016 12:00:00 GMT Tyler Rosonke Web & App Security An analysis of referer-based open redirection vulnerabilities and why they are more dangerous than they appear. https://trustfoundry.net/blog/cross-site-request-forgery-cheat-sheet https://trustfoundry.net/blog/cross-site-request-forgery-cheat-sheet Sun, 03 Apr 2016 12:00:00 GMT Alex Lauerman Web & App Security A comprehensive cheat sheet for Cross-Site Request Forgery (CSRF) attacks, covering techniques and defenses. https://trustfoundry.net/blog/reverse-engineering-a-discovered-atm-skimmer https://trustfoundry.net/blog/reverse-engineering-a-discovered-atm-skimmer Thu, 31 Mar 2016 12:00:00 GMT Matt South Tooling & Tradecraft Reverse engineering an ATM skimmer discovered in the wild, analyzing its hardware and data exfiltration methods. https://trustfoundry.net/blog/exploiting-java-deserialization-on-jboss https://trustfoundry.net/blog/exploiting-java-deserialization-on-jboss Wed, 18 Nov 2015 12:00:00 GMT Nick Fox Exploit Development Exploiting Java deserialization vulnerabilities on JBoss application servers to achieve remote code execution. https://trustfoundry.net/blog/unquoted-service-path-vulnerability-windows https://trustfoundry.net/blog/unquoted-service-path-vulnerability-windows Thu, 10 Sep 2015 12:00:00 GMT Matt South Windows & Active Directory A practical walkthrough of exploiting unquoted service path vulnerabilities in Windows for privilege escalation. https://trustfoundry.net/blog/browser-url-encoding-decoding-and-xss https://trustfoundry.net/blog/browser-url-encoding-decoding-and-xss Mon, 20 Apr 2015 12:00:00 GMT Alex Lauerman Web & App Security Understanding browser URL encoding and decoding behavior and its implications for cross-site scripting attacks. https://trustfoundry.net/blog/exploiting-net-padding-oracle-ms10-070 https://trustfoundry.net/blog/exploiting-net-padding-oracle-ms10-070 Mon, 20 Apr 2015 12:00:00 GMT Alex Lauerman Exploit Development Exploiting the .NET padding oracle vulnerability (MS10-070 / CVE-2010-3332) and demonstrating how to bypass Microsoft's initial workaround. https://trustfoundry.net/blog/trustfoundry-at-trikc-0x01 https://trustfoundry.net/blog/trustfoundry-at-trikc-0x01 Sun, 09 Nov 2014 12:00:00 GMT Alex Lauerman Career & Company TrustFoundry's participation at the TriKC 0x01 security conference in Kansas City. https://trustfoundry.net/blog/trustfoundry-at-blackhat-usa-2014 https://trustfoundry.net/blog/trustfoundry-at-blackhat-usa-2014 Sun, 20 Jul 2014 12:00:00 GMT Alex Lauerman Career & Company TrustFoundry's experience at BlackHat USA 2014. https://trustfoundry.net/blog/building-a-presentation-recording-setup https://trustfoundry.net/blog/building-a-presentation-recording-setup Tue, 17 Jun 2014 12:00:00 GMT Alex Lauerman Career & Company How we built a presentation recording setup for capturing security talks and training content. https://trustfoundry.net/blog/is-security-worth-it https://trustfoundry.net/blog/is-security-worth-it Mon, 21 Apr 2014 12:00:00 GMT Alex Lauerman Career & Company A discussion on the value proposition of investing in cybersecurity and why it matters for businesses of all sizes.