The Curious Engineer

All blogs / Security

Pentest Blog Posts on Aura Research Division

research.aurainfosec.io/pentest

Articles written by the pentest team

SecurityReverse engineeringNetworkingWindows internals

’16’17’18’19’20’21’22’23’24’25’26
Posts
23 from 29 Sep 2016 to 26 May 2026
Posting
now and then (1 in the last year)
Kind
company blog
Feed
https://research.aurainfosec.io/pentest/index.xml

2026 1

  1. Exploring Agent based Cloud Review Capabilities

2025 3

  1. Patch Diffing Microsoft Windows Wi-Fi Driver Vulnerability (CVE-2024-30078) - Part 2
  2. Modifying Certipy to Evade Microsoft Defender for Identity PKINIT Detection
  3. A Cost Effective Covert Implant for Red Teamers

2024 3

  1. Patch Diffing Microsoft Windows Wi-Fi Driver Vulnerability (CVE-2024-30078) - Part 1
  2. Don't Click Evil.txt: CVE-2024-30050 and Other Windows Silliness
  3. Git-Rotate: Leveraging GitHub Actions to Bypass Microsoft Entra Smart lockout

2023 5

  1. Hook, Line, and Phishlet: Conquering AD FS with Evilginx
  2. Bee-yond Capacity: Unauthenticated RCE in Extreme Networks/Aerohive Wireless APs - CVE-2023-35803
  3. Pentah0wnage: Pre-Auth RCE in Pentaho Business Analytics Server
  4. The Threat on Your Desk: Building an Evil USB-C Dock
  5. Reverse SSH: A Fast, Stable Reverse Shell Handler

2022 2

  1. Device Code Phishing: A Frontend UI
  2. Hacking the Hive: Discovering Vulnerabilities in Aerohive Devices

2021 1

  1. CCTV: Now You See Me, Now You Don't

2019 1

  1. Same-Origin Policy: From birth until today

2018 1

  1. Automating a Thorny SQL Injection With SQLMap

2017 3

  1. Universal Second Factor - Phishing-proof 2FA for general human beings
  2. SCADA Penetration Testing: Do I need to be prepared?
  3. Hunting For Bugs With AFL 101 - A Primer

2016 3

  1. Bypassing SAML 2.0 SSO with XML Signature Attacks
  2. iOS Application Security Review Methodology
  3. Not So Strict Transport Security