RESEARCH & INSIGHTS / FROM THE WORKBENCH
Follow the question.
Share what you learn.
Selected writing from Raindayzz: original vulnerability research, field experience, and technical learning.
When a protocol crosses
the wrong boundary.
FileMage Gateway — SSRF via FTP Bounce
An investigation into an unvalidated FTP PORT command, the trust boundary it crosses, and the remediation considerations.
Read on RaindayzzConsulting versus internal.
A pentester’s view.
Reflections on scope, communication, technical depth, and the different rhythms of consulting and in-house offensive security.
Read the perspective TECHNICAL LEARNING / AUG 03, 2024SANS SEC660.
The path to GXPN.
A first-hand account of advanced penetration testing training, the certification experience, and lessons from the process.
Read the review VULNERABILITY RESEARCH / AUG 20, 2023FileMage Gateway.
A file-access flaw.
The research and disclosure behind CVE-2023-39026, a file-access vulnerability in the Azure Marketplace deployment.
Read the researchMore write-ups, technical notes, and lessons learned.
Visit the Raindayzz blogBUILD WITH CONFIDENCE
Let’s protect
what comes next.
Tell us what you’re building.
We’ll talk about how to test it.