Immunity Products

With the recent release of MS14-068 it became quite clear that a PSEXEC (sysinternals) module would be a fine addition in CANVAS . We wro...

Microsoft Security Bulletin MS13-081 announced an elevation of privilege vulnerability [ http://technet.microsoft.com/en-us/security/bullet...

Some notes on exploit development There are two types of frustration as an exploit developer when you are facing a malware with a zero day...

Who doesn't love vulnerabilities in web servers? We've written nginx bugs before and it was a lot of fun. Now Immunity is pleased t...

In penetration testing there is an enormous focus on obtaining shells; and rightly so. Having that level of access to a host, regardless of ...

Not so long ago we posted about a JavaSecurity Warning bypass  that used a serialized applet instance. That bypass was fixed in Java 7 upd...

Linux PTRACE CVE_2013_0871 Solar Designer calls this one of the more dangerous Linux local exploits since  CVE-2010-3081. (c.f.  http://...

Immunity is well known for its product base that is designed to help the lives and duties as network professionals, security auditors and pe...

One of the super neat things about CANVAS and MOSDEF is that it provides a vehicle to write code that executes in memory of an exploited ho...