Rhino Security Labs

We’re growing the assessment team! Rhino Security Labs is hiring an Associate Pentester who has webapp pentest skills and a strong desire to learn more. Sound like you (or someone you know)? More info here: apply.workable.com/rhino-security…

New Rhino Blog Post: Referral Beware, Your Rewards are Mine (Part 1) rhinosecuritylabs.com/research/refer…

New Rhino Blog Post: Multiple CVEs in Infoblox NetMRI: RCE, Auth Bypass, SQLi, and File Read Vulnerabilities bit.ly/45HHEwb

New Rhino Blog Post: CVE-2025-26147: Authenticated RCE In Denodo Scheduler bit.ly/4jhmNTA

New Rhino Blog Post: Newest Pacu Module: Secret Enumeration in Elastic Beanstalk bit.ly/42nQNYR

New Rhino Blog Post: CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith bit.ly/4j1Eyqo

CloudGoat is our free "vulnerable by design" AWS Deployment tool. We redesigned the scenarios to make it easier for you to get started! We created categories and grouped them by difficulty. Launch your first scenario here: bit.ly/3F7QBUv

New Rhino Blog Post: CVE-2025-0693: AWS IAM User Enumeration bit.ly/3QcEpnx

New Rhino Blog Post: CVE-2024-46506: Unauthenticated RCE in NetAlertx bit.ly/3PRjqXn

New Rhino Blog Post: CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) bit.ly/4hBGBRo

@MrHasanabas just caught this, sorry for the delay. DMd to chat

@RhinoSecurity I am interested, can you please DM me or email where i can discuss before applying?

We're hiring for an Account Manager! Looking to grow in your sales career and build technical expertise on the way? We might be a fit - lets chat! Details and application: bit.ly/3Do9aCH

@tobalotv This research was actually released back in 2017 (we were bit ahead of the curve). Great there's interest in it again!

New research from @RhinoSecurity reveals the risks of cloud storage ransomware: attackers could encrypt 100GB in <2 mins using KMS across major platforms like AWS. Key defenses include object versioning, strict policies, and offline backups. Learn more: rhinosecuritylabs.com/aws/s3-ransomw…

New Rhino Blog Post: CloudGoat Official Walkthrough Series: ‘sqs_flag_shop’ bit.ly/4ggbcmQ

New Blog Post: CloudGoat: New Scenario and Walkthrough (sns_secrets) bit.ly/3BNFyy8

New Blog Post: CloudGoat Official Walkthrough Series: ‘glue_privesc’ bit.ly/3ZdBuAM

Cloudgoat: We've created scenario guidelines and example template scenario to help the community build new scenarios. Get started today - bit.ly/4d4Ay4W

New Blog Post: Vestaboard: Exploring Broken Access Controls and Privilege Escalation bit.ly/3YA7pew

Now hiring: Associate Application Pentester Does this sound like you? Now accepting applications! bit.ly/4ciGrLU

New Blog Post: CVE-2024-2389: Command Injection Vulnerability In Progress Flowmon bit.ly/3xPfpwP