Team82 Research

Research Blog Papers Reports

{JS-ON: Security-OFF}: Abusing JSON-Based SQL to Bypass WAF

Team82 Research

{JS-ON: Security-OFF}: Abusing JSON-Based SQL to Bypass WAF

An Oil and Gas Weak Spot: Flow Computers

Team82 Research

An Oil and Gas Weak Spot: Flow Computers

Siemens PLC Software: Hardcoded Cryptographic Keys Uncovered

Team82 Research

The Race to Native Code Execution in PLCs: Using RCE to Uncover Siemens SIMATIC S7-1200/1500 Hardcoded Cryptographic Keys

Bypassing NAT to Attack Dataprobe iBoot-PDUs

Team82 Research

Jumping NAT to Shut Down Electric Devices

PLC Industrial Controler Attack: Using a Controller as Predator or Prey

Team82 Research

Evil PLC Attack: Using a Controller as Predator Rather than Prey

FileWave MDM (mobile device management) Vulnerabilities Uncovered

Team82 Research

With Management Comes Risk: Finding Flaws in FileWave MDM

Securing Network Management Systems (Part 3): Siemens SINEC NMS

Team82 Research

Securing Network Management Systems (Part 3): Siemens SINEC NMS

Exploiting Vulnerabilities in XINJE PLC Program Tool

Team82 Research

From Project File to Code Execution: Exploiting Vulnerabilities in XINJE PLC Program Tool

Simple Snort Network Topology

Team82 Research

Blinding Snort IDS/IPS: Breaking the Modbus OT Preprocessor