Praetorian Blog

http://www.praetorian.com/ These guys were great. I used them for audit of one of our web apps. Their audit report was easy to digest and take action on.

Yikes. Lots of weird auth-related news coming out of Microsoft in the past week or so. A coworker shared this vulnerability disclosure the other day: https://www.praetorian.com/blog/azure-b2c-crypto-misuse-and-account-co… I’d be curious about a follow up if the author ever figures out how the account takeover happened. I wonder if logging into the account on a school device resulted in automatic enrollment or something.

Praetorian | Multiple positions | Austin, TX - Washington, DC - REMOTE | ONSITE, FULL-TIME | https://www.praetorian.com Praetorian is a collective of highly technical engineers and developers offering deep security expertise that is solving the toughest challenges faced by today’s organizations across an ever-evolving digital threat landscape. Our solutions enable clients to find, fix, stop and ultimately solve cybersecurity problems across their entire enterprise and product portfolios. We're rapidly growing and looking for Engineers with an enthusiasm for security. Come see why we were voted one of INC's best workplaces of 2019! We offer deep technical expertise across the following domains: IoT, SaaS Applications, Mobile Applications, Cloud Infrastructure, Corporate Infrastructure, and Critical Infrastructure. Hiring for the following roles: Senior Security Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Principal CNO Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Principal Security Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Staff Security Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Managing Security Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Practice Manager…

Praetorian | Multiple positions | Austin, TX - Washington, DC - REMOTE | ONSITE, FULL-TIME | https://www.praetorian.com Praetorian is a collective of highly technical engineers and developers offering deep security expertise that is solving the toughest challenges faced by today’s organizations across an ever-evolving digital threat landscape. Our solutions enable clients to find, fix, stop and ultimately solve cybersecurity problems across their entire enterprise and product portfolios. We're rapidly growing and looking for Engineers with an enthusiasm for security. Come see why we were voted one of INC's best workplaces of 2019! We offer deep technical expertise across the following domains: IoT, SaaS Applications, Mobile Applications, Cloud Infrastructure, Corporate Infrastructure, and Critical Infrastructure. Hiring for the following roles: Senior Security Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Principal CNO Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Principal Security Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Staff Security Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Managing Security Engineer - https://hire.withgoogle.com/public/jobs/praetoriancom/view/P_AAAAAACAA… Practice Manager…

Praetorian | Austin, Texas Praetorian is different. We are a collective of highly-technical engineers focused on helping our clients solve their most difficult security problems. Rather than break things over and over, our goal is to have an actual impact in making the world a better place. 100% privately owned and self-funded, we are focused on doing the right thing over short term profits. Where other companies pay lip service to vision statements and principles, we are unwaveringly guided by our core values, which are: * Put the client first - Solving their problem is why we are here. * Mind the details - A disciplined process achieves results. * Be humble - The needs of the many outweigh the needs of the one. * Follow the data - Good data improves judgement and informs decisions. * Performance matters - We achieve excellence in everything we do. * Orient to action - Make decisions. Make mistakes. Just take the initiative. * Default to open - Speak candidly, maintain your integrity, and spread truth. * Support your team - It’s about the person to your left and the person to your right. * Lean forward - Enduring success in this field requires innovation and reinvention. * Follow your passions - Our best work is realized when our vocation is our avocation. Although small, we are growing rapidly, with 50% YOY growth for the past three years. That growth is based on fantastic clients and their support. Our annual net promoter score is consistently over…

Praetorian | Security Engineer | Austin, Texas | REMOTE (For principal and staff positions) Praetorian is different. We are a collective of highly-technical engineers focused on helping our clients solve their most difficult security problems. Rather than break things over and over, our goal is to have an actual impact in making the world a better place. 100% privately owned and self-funded, we are focused on doing the right thing over short term profits. Where other companies pay lip service to vision statements and principles, we are unwaveringly guided by our core values, which are: * Put the client first - Everything else will work out. * Enjoy the work you do - Passion eats education and experience for breakfast. * Be humble - True significance is only achieved as a team. * Embrace the wobble - There is existential urgency to our work. We need to move and adapt quickly. * Walk with a swagger - Relish the new challenge. * Default to open - The right decision is in the data. Share all of it. * Orient to action - Do not wait to be directed. Engage. * Performance matters - We are a small company intent on doing big things. Every individual effort counts. * Stop evil - Our mission is to make the world a safer and more secure place. * Make craters - Our time on this earth is short. Leave an impact. Although small, we are growing rapidly, with 50% YOY growth for the past three years. That growth is based on fantastic clients and their support. Our annual net…

https://github.com/orgs/community/discussions/27065 https://stackoverflow.com/questions/77090044/github-actions-adding-to-… https://www.praetorian.com/blog/pwn-request-hacking-microsoft-github-r… All you need is user content containing `backticked`, and a github action referencing that via eg "github.event.issue.title" where the shell would normally execute `backticked` as a command (like echo, cat, etc).

Automotive Pentesting has been an industry for years [0][1][2] [0] - https://www.praetorian.com/services/automotive-penetration-testing/ [1] - https://plaxidityx.com/ [2] - https://autocrypt.io/

Yes, use FIDO, you'll be better off, but no, passkeys aren't immune to account takeover. E.g. not only does GitHub support OAuth apps, it supports device code flow, and thus: https://www.praetorian.com/blog/introducing-github-device-code-phishin…

We’re excited to introduce Goffloader, a Golang implementation of a COFFLoader. There are not many Go-native COFFLoaders out there, and we didn’t find one we felt was polished enough to use in the field. So, we built one ourselves, that is: 1. Compatible with Cobalt Strike BOFs 2. Simple to use (invoked with just three lines of code) 3. 100% open-source So, what is a COFFLoader? COFFLoaders run binaries directly from memory without writing them to disk. They are useful for bypassing endpoint defenses (AVs, EDRs, etc.) that scan downloaded files. But COFFLoaders are generally written in C, and endpoint defenses can spot them a mile away. Solution? Golang, always more Golang. Read our blog post here: https://www.praetorian.com/blog/introducing-goffloader-a-pure-go- implementation-of-an-in-memory-coffloader-and-pe-loader/

This sounds a lot like my memory of what Praetorian Chariot does (continuous security scanning and pentesting as a service). Very cool to see that idea in an open source tool. https://www.praetorian.com/proactive-cybersecurity-technology/

Signal provides both deniability and authenticated encryption. This article has some good info on how this is possible: https://www.praetorian.com/blog/an-opinionated-series-on-why-signal-pr…

we had a good experience with https://www.praetorian.com/services/penetration-testing/ earlier this year

Is the log4j vulnerability any worse in terms of potential length of consequences than 2014's Shellshock (https://en.wikipedia.org/wiki/Shellshock_(software_bug)), or the PHP-run-as-CGI bug (https://www.praetorian.com/blog/php-cgi-remote-command-execution-vulne… Both of those were extremely widespread, but active exploitation seems to have died out. I'm sure that the occasional abandoned WordPress VPS falls prey to the PHP-as-CGI problem, but these "ubiquitous" vulnerabilities tend to get used up pretty quickly.

first dedicated static analysis (SAST) tool for Istio, read more at https://www.praetorian.com/blog/introducing-snowcat/

praetorian.com has some cool CTF for hiring stuff on their website: https://www.praetorian.com/challenges

He's right about the low entropy of many crypto random number generators. There are so many cases of this that it can't be by accident. 2013: Android random number flaw exploited for Bitcoin theft. http://arstechnica.com/security/2013/08/google-confirms-critical-andro… Backdoor in RSA? http://arstechnica.com/security/2014/01/how-the-nsa-may-have-put-a-bac… Linus Torvalds insists on accepting Intel patch to use their hardware random number generator directly instead of just using it as one of multiple sources being XORed together. http://cryptome.org/2013/07/intel-bed-nsa.htm Then there are "features" in SSL/TLS which make little sense, such as the ability to change the cryptosystem during the connection. This includes changing it to "None". That's been exploited. http://www.praetorian.com/blog/man-in-the-middle-tls-ssl-protocol-down…

From the top of my head..: The Praetorian Bootcamp challenges are similar to the Matasano ones: https://www.praetorian.com/challenges/ Lisp Koans: https://github.com/google/lisp-koans Project Euler: https://projecteuler.net/ Exercism: http://exercism.io/ 99 Lisp Problems: http://www.ic.unicamp.br/~meidanis/courses/mc336/2006s2/funcional/L-99…