Technical insights from Blaze Labs
Blaze Labs is the R&D group of Blaze Information Security.
LLM pentest: Leveraging agent integration for RCE
This post describes a case study of a recent LLM pentest engagement that allowed to exploit the LLM agent for remote code execution.
All Articles
PWN DAT DOMAIN: Becoming domain admin with a little help from Veeam Backup
This post provides a walkthrough of an escalation to domain admin taking advantage of Veeam backups.
Attack of the clones 2: Git CLI remote code execution strikes back
This post is the second part of the story of a vulnerability that could be leveraged as a supply chain attack and used to hack millions of software developers around the world.
Tales of two security issues in cryptocurrency software wallets
This post discusses security concerns and two vulnerabilities in Harmony and oByte, two browser extensions that serves as a cryptocurrency software wallet.
Hacking Play-to-Earn blockchain games: the case of Manarium
This post provides an overview of hacking play-to-earn blockchain games and common security pitfalls affecting P2E. It explains in detail how several vulnerabilities were discovered in a P2E game named Manarium.
Dependency Confusion: An exploitation overview
This post provides an overview of Dependency Confusion attacks and explains how they can be exploited in the wild, with examples using NPM packages and tips to prevent these vulnerabilities from occurring.
Antivirus Evasion: Tearing AMSI Down With 3 Bytes Only
This post aims to showcase one of the many possible techniques for bypassing antivirus solutions through in-memory patching of AMSI instructions.
