Immunity Inc.

Here's our latest blog by @sam4k1, where we examine what goes into remotely exploiting a modern Linux kernel using CVE-2022-0435 as a case-study blog.immunityinc.com/p/writing-a-li…

Gracias @Immunityinc por ser parte historica y por apoyar nuevamente a la JAM . 🙏

📢Tenemos la primera charla de la Jam. 🥷el señor @airrera 🏬Security Researcher en Immunity Inc. 📃Con grandes aportes a la comunidad como este: immunityservices.blogspot.com/2021/02/miscon… #securityjam

We're hiring!

Check out our new blog, a detailed analysis on our recently disclosed CVE-2022-0435: A Remote Stack Overflow in the Linux Kernel TIPC Module since 4.8 by @sam4k1 blog.immunityinc.com/p/a-remote-sta…

We discovered a stack overflow vulnerability in the TIPC module of the Linux kernel. Learn more including how to remediate. bit.ly/3oMOwlx

Log4j... Anibal has been doing a bit of research. Check out our blog:immunityservices.blogspot.com We've also released GitHub Project Immunityinc - Log4j-JNDIServer - to help test the vulnerability: github.com/immunityinc/Lo… @airrera @__rev

SILICA 7.46 Release - Check it out! immunityinc.com/products/silic… Improvements in wireless scanning, threat detection, and fake access point attacks.

CANVAS 7.31 Updates This new release has 5 new exploits! Omigod, seriousSAM, Office MSHTML RCE and more! canvas.immunityinc.com/getcanvas"

SILICA 7.45 Release - Check it out! immunityinc.com/products/silic… Fake access point service impersonation attacks can now be customized. There is also a new request monitor view with filtering capabilities.

New version of CANVAS is out!(canvas.immunityinc.com/getcanvas) 7.30 is available for all of our customers and contains several new exploits and improvements. Make sure to check out our own implementation of PrintNightmare! We are pushing both LPE and RCE exploits

SILICA 7.44 is out! immunityinc.com/products/silic… Added the ability to export access point mappings as .docx, improvements in deauth attacks and better error detection and handling when connecting to access points.

Check out our demonstration of chaining the ie_mshtml_doublefree clientside exploit with the wndextra_oob_lpe exploit in CANVAS 7.29 release! vimeo.com/549289061

New CANVAS 7.29 release is OUT! It includes 3 new exploits, two of them can be chained together to go from client-side to full privileges over a target Windows 10 (CVE-2021-26411 and CVE-2021-1732) canvas.immunityinc.com/getcanvas

CANVAS 7.28 Release - Check it out! immunityinc.com/products/canva… Includes: local privilege escalation exploits targeting Windows, LPE targeting Ubuntu/Debian distros & remote code execution exploit targeting MS Exchange Server Linux installer now supports Ubuntu 20.04 & Kali 2021.1.

Check out Immunity's blog post: Misconfigurations in Java XML Parsers by Anibal Irrera immunityservices.blogspot.com

Hey CANVAS Aficionados! Our latest version of CANVAS has been released! CANVAS 7.27 can be downloaded from our customer portal. Check it out... canvas.immunityinc.com/getcanvas

New - SILICA 7.41 Release: Includes the Kr00k Attack, a vulnerability that affected over 1 billion devices. With this attack the confidentiality of packets sent over the air by vulnerable devices is compromised. View the demo of the attack: <vimeo.com/481719308/142b…>

INNUENDO New Release v1.7.3 - Oct 2020 * New channel: TCP (Windows, macOS & Linux) & DNS over TCP (Windows) * Client-side Python (Windows payloads) updated to 2.7.18 * UDP channel supports multiple server-side endpoints, same as TCP channel Check it out immunityinc.com/products/innue…

Immunity is hiring! We're searching for innovators & like minded offense security folks to join our team. Multiple positions open, starting with: Software Security Engineer - CANVAS: Next Gen linkedin.com/jobs/view/2185… Positions to be posted soon: Sr Researchers (qty 2), Tech PM