Detecting Salesloft Drift through DNS OSINT TechniquesMuch of my work as a security researcher involves finding exposed products and services on the internet. In every case, I did this by inspecting HTTP response bodies and headers and looking for specific keywords. But I wondered, what if there were an...Dec 1, 2025 · 4 min readrxerium.hashnode.dev
Detection for CVE-2025-8875 & CVE-2025-8876Over the past few weeks, two critical vulnerabilities - CVE-2025-8875 and CVE-2025-8876 have surfaced as active threats in the wild. Both have been flagged by CISA as being widely exploited, and organisations relying on N-able N-central are particula...Aug 26, 2025 · 3 min readrxerium.hashnode.dev
Internal Security DetectionIntroduction — hunting for assurance and OSINT Exposed SafeBase portals serve two audiences at once: prospects who need proof of your security posture, and security researchers (blue and red teamers). Each green tick reveals a control that (supposedl...Jun 23, 2025 · 5 min readrxerium.hashnode.dev
CVE-2025-31324 Zero DayOverview CVE-2025-31324 is a critical zero-day vulnerability affecting SAP NetWeaver Visual Composer, a component used for developing enterprise applications within the SAP NetWeaver platform. Discovered by ReliaQuest and disclosed by SAP on April 24...May 10, 2025 · 2 min readrxerium.hashnode.dev