Sep 25, 2019 | Enterprise Security, Exploit Development, Pentesting, Vulnerabilities
Objective In an effort to help make us all more secure, VDA decided to release a pentest technique, that we discovered a while ago. We notified Microsoft many months ago of this technique, and they have been a great partner as always, in quickly working to mitigate... 
Sep 11, 2019 | AppSec, Exploit Development, Fuzzing, Security Conferences
Over the past weekend the last version of DerbyCon ever came to an end. At the conference the VDA Labs team conducted our Advanced Exploitation training and four members of our team had the honor of giving talks in front of some of the best hackers in the world. The... 
May 6, 2019 | Business, Pentesting, Privacy, Security
VDA Labs’ founder Dr. Jared DeMott as well as Greg Hatcher and Sy VanderMeulen were recently interviewed by WWMT to discuss WIFI security and the risks of using open wireless networks. Many people assume there are no risks in utilizing public wireless networks,... 
Apr 25, 2019 | Exploit Development, Fuzzing, Vulnerabilities
At VDA we like to tackle many different types of security challenges – one of them being Application Security (AppSec). A recent project involves working with the Microsoft Security Risk Detection (MSRD) fuzzing platform. In basic terms, MSRD is a security... 
Apr 9, 2019 | Pentesting, Security
At VDA Labs we are constantly improving our tradecraft. One of the ways we do this is by leveraging, testing, and building tools. And when there are existing toolsets that make our jobs easier, we explore and share. Why is docker cool? When we use a tool, especially... 
Mar 21, 2019 | AppSec, Fuzzing, Security
At VDA Labs we cover a wide berth of technologies and are sometimes asked to do unique engineering tasks. You also might have noticed that we are big fans of fuzzing as a means of finding bugs. Quite often, we are asked to work on technology that requires a learning... 
Mar 9, 2019 | AppSec, Exploit Development, Malware Analysis
At VDA Labs we get excited about Reverse Engineering tools, and the recent release of NSA’s GHIDRA does not disappoint. The fact that it is free, supports many different CPU architectures, contains decompiler functionality, and allows many Reverse Engineers to... 
Mar 5, 2019 | AppSec, Pentesting
At VDA Labs, we get to work on challenging information security problems across many technologies and diverse industries. This broad exposure sometimes gives us unique ideas on how to approach challenges we encounter. One of these ideas that we have been using with... 
