Research – SCRT Team Blog / Orange Cyberdefense Switzerland's technical blog Tue, 22 Sep 2026 07:34:59 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.8 /wp-content/uploads/2024/10/cropped-favicon-32x32-1-32x32.png Research – SCRT Team Blog / 32 32 How One Twitch Chat Message Became Code Execution on a Streamer’s PC /2026/09/22/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc/ Tue, 22 Sep 2026 07:06:37 +0000 /?p=7426 Continue reading How One Twitch Chat Message Became Code Execution on a Streamer’s PC]]> HP One Agent: local privilege escalation through race condition [CVE-2026-5064] /2026/09/08/hp-one-agent-local-privilege-escalation-through-race-condition-cve-2026-5064/ Tue, 08 Sep 2026 07:05:53 +0000 /?p=7408 Continue reading HP One Agent: local privilege escalation through race condition [CVE-2026-5064]]]> From a Regular Red Team Exercise to Developing a Custom C2 Channel over MS Teams /2026/04/21/from-a-regular-red-team-exercise-to-developing-a-custom-c2-channel-over-ms-teams/ Tue, 21 Apr 2026 12:47:26 +0000 /?p=7207 Continue reading From a Regular Red Team Exercise to Developing a Custom C2 Channel over MS Teams]]> Blinding EDRs: A deep dive into WFP manipulation /2025/08/25/blinding-edrs-a-deep-dive-into-wfp-manipulation/ Mon, 25 Aug 2025 08:22:56 +0000 /?p=7176 Continue reading Blinding EDRs: A deep dive into WFP manipulation]]> SonicDoor – Cracking SonicWall’s SMA 500 /2025/06/04/sonicdoor-attacking-sonicwalls-sma-500/ Wed, 04 Jun 2025 09:36:07 +0000 /?p=6642 Continue reading SonicDoor – Cracking SonicWall’s SMA 500]]> The effect of granting Azure Reader role on Azure Container Registry instances /2024/12/13/understanding-azure-container-registry-permissions-a-security-concern/ Fri, 13 Dec 2024 08:27:13 +0000 /?p=6672 Continue reading The effect of granting Azure Reader role on Azure Container Registry instances]]> Attacking Cortex XDR from an unprivileged user perspective /2024/12/05/attacking-cortex-xdr-from-an-unprivileged-user-perspective/ Thu, 05 Dec 2024 12:49:41 +0000 /?p=6405 Continue reading Attacking Cortex XDR from an unprivileged user perspective]]> Arbitrary web root file read in Sitecore before v10.4.0 rev. 010422 /2024/11/25/arbitrary-web-root-file-read-in-sitecore-before-v10-4-0-rev-010422/ Mon, 25 Nov 2024 13:34:08 +0000 /?p=5725 Continue reading Arbitrary web root file read in Sitecore before v10.4.0 rev. 010422]]> Exploiting KsecDD through Server Silos /2024/11/11/exploiting-ksecdd-through-server-silos/ Mon, 11 Nov 2024 13:13:58 +0000 /?p=5731 Continue reading Exploiting KsecDD through Server Silos]]> Privilege escalation through TPM Sniffing when BitLocker PIN is enabled /2024/10/28/privilege-escalation-through-tpm-sniffing-when-bitlocker-pin-is-enabled/ Mon, 28 Oct 2024 08:45:51 +0000 /?p=6045 Continue reading Privilege escalation through TPM Sniffing when BitLocker PIN is enabled]]>