Black Lantern Security (BLSOPS)

Home
Vulnerability Research
Detection Engineering
Products and Tools
Subscriber Requests
Archive
About
XSS and SQLi in Forecast® by Tideworks
Tideworks: CVE-2022-43112 & CVE-2022-43115: Forecast® (10.10.0.13153)
 • 
Jacob Holvick

August 2023

Subdomain Enumeration Tool Face-off - 2023 Edition
Benchmarking the industry's top subdomain enumeration tools
 • 
TheTechromancer
BBOT - DEF CON Tool Release
BBOT 1.1.0 is here, and with it some exciting new developments!
 • 
TheTechromancer

July 2023

CVE-2023-3433 & CVE-2023-3434 - Jami Local Denial Of Service and Passing Strings to QRC URL Vulnerabilities
Public Disclosure of 2 Vulnerabilities found within GNU Jami (Multiple Versions)
 • 
Mason Corkern

March 2023

Introducing Badsecrets
A Library for Detecting Known or Weak Secrets Across Many Web Frameworks
 • 
Paul Mueller

February 2023

The BLS-Bible
A knowledge-base management tool aimed to improve the lives of information security professionals in all walks of life.
 • 
Cody Martin

January 2023

Introducing the ETM API: Enhanced Capabilities for Black Lantern Security's enter_the_matrix Tool
ETM API provides enhanced abilities for interacting directly on the data collected by ETM including the ability to produce actionable metrics for…
 • 
Cody Martin

October 2022

Yet Another Telerik UI Revisit
Introduction Several vulnerabilities with the popular ASP.NET web application add-on Telerik UI for ASP.NET AJAX have become a frequent source of…
 • 
Paul Mueller
Subdomain Enumeration Tool Face-off 2022
Comparing the industry's top subdomain enumeration tools
 • 
TheTechromancer
Mapping Windows Audit Log Settings to MITRE Data Sources for Rabobank-CDC DeTT&CT
Use the DeTT&CT framework to assess TTP coverage, perform gap analysis, and prioritize detection engineering efforts
 • 
Philip Hartlieb
, 
Adeem Mawani
, and 
Brian O'Hara
1

August 2022

BBOT
Recursive OSINT Machine
 • 
TheTechromancer
Privileged Directory Traversal in Brocade Fabric OS
Brocade: CVE-2021-27798: Fabric OS (Multiple Versions)
 • 
Cody Martin
© 2024 Black Lantern Security (BLSOPS)
Privacy ∙ Terms ∙ Collection notice
Start WritingGet the app
Substack is the home for great culture