Cyber Security Blog | 8com Research

BloodHound is one of the essential tools for every Penetration Tester and Red Teamer and with the new release of BloodHound CE, BloodHound got some very nice and useful improvements. This blog post will show some examples on how the underlying database or the new API can be used to automatically find many basic weaknesses in an Active Directory environment.

smarttimeplus is a time tracking software by NovaCHRON. It was vulnerable to an authentication bypass and still has multiple authorization flaws.