Websec / Blog
Securing Today. Tomorrow could be too late.

Join us as we explore the ever-evolving world of cyber threats and arm yourself with knowledge to defend against potential breaches.

Get Consultation

Discover whats new

Posted 13 Aug

Research on ZigBee Security, Interference and SDR-Based Attacks

English, DutchResearch on ZigBee security, interference and SDR attacks using HackRF and GNU Radio in smart home environments.

IoTRed TeamJamming

Posted 14 Oct

A deep dive into Microsoft Warbird: MS's kernel-mode dynamic packer.

English, DutchMicrosoft Warbird is a kernel-mode dynamic packer that works even in an HVCI-protected kernel. In this blog post, we will reverse engineer and analyze its inner workings.

reverse engineeringkernel-modering0

Posted 10 Feb

The Most Dangerous Application Security Vulnerabilities of 2024

English, DutchUnderstanding application security vulnerabilities is the first step in protecting applications from compromise. Here are the top app security risks, plus real-world examples.

vulnerabilitiespentestingweb app security

IoT Firmware, what is it and how does it help you hack a router?

English, DutchThis article explores the process of extracting and analyzing firmware from IoT devices, particularly wireless routers.

Posted 11 February, 25

Enhancing Vulnerability Management under NIS2 through Coordinated Vulnerability Disclosure (Part 2)

English, DutchImplementing coordinated vulnerability disclosure (CVD) programs is critical to NIS2 compliance. Learn strategies to strengthen your cybersecurity efforts here.

Posted 06 October, 24

How to Prepare for the EU NIS2 Directive (Part 1)

English, DutchAs cyberattacks grow, the EU’s NIS2 directive builds on NIS1 to provide more rigorous cybersecurity measures. Learn how to ensure NIS2 compliance with WebSec.

Posted 17 July, 24

Critical Vulnerability in Vision Helpdesk Allows Unauthorized Session Access

English, DutchA Serialized IDOR vulnerability in Vision Helpdesk enables session prediction, allowing attackers to impersonate users without authentication.

Posted 02 November, 24

AttackForge vs PlexTrac Comparison: Differences, Similarities and Alternatives

English, DutchLearn the differences and similarities between AttackForge vs PlexTrac for pentesting management and reporting, including alternatives to make an informed choice.

Posted 02 August, 24

Critical IDOR Vulnerability in LatePoint Plugin Exposes Sensitive Data

English, DutchThe LatePoint Plugin plugin for WordPress was vulnerable to unauthorized access of data through Insecure Direct Object Reference, allowing for the exposure of customer payment data such as creditcards

Posted 13 June, 24

An Introductory Guide to Pentesting Azure: Benefits and Tools: Part 2

EnglishIn this guide to pentesting Azure, we discuss the benefits of cloud penetration tests and the best Azure tools to identify & fix vulnerabilities.

Posted 14 April, 24

Hack ZTE router's admin panel

EnglishLet's say that you are connected to a public Wi-Fi. How difficult is it to crack the password to the admin panel of the router?

Posted 12 April, 24

Need Security?

Are you really sure your organization is secure?

At WebSec we help you answer this question by performing advanced security assessments.

Want to know more? Schedule a call with one of our experts.

Schedule a call

Websec / Blog Securing Today. Tomorrow could be too late.