Matt Dunn

Blog Archive Tag

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines
Matt Dunn
  • CVE-2022-26653 & CVE-2022-26777: ManageEngine Remote Access Plus Guest User Insecure Direct Object References

    CVE-2022-26653 & CVE-2022-26777: ManageEngine Remote Access Plus Guest User Insecure Direct Object References
    ,
    Raxis lead penetration tester Matt Dunn uncovers two more ManageEngine vulnerabilities (CVE-2022-26653 & CVE-2022-26777).
    Raxis Research Team July 21, 2022
  • CVE-2022-25373: ManageEngine Support Center Plus Stored Cross-Site Scripting (XSS)

    CVE-2022-25373: ManageEngine Support Center Plus Stored Cross-Site Scripting (XSS)
    ,
    Matt Dunn discovers another ManageEngine Cross-Site Scripting vulnerability, this one in the Support Center Plus application.
    Raxis Research Team July 6, 2022
  • Simultaneous Sessions

    Why We Take Simultaneous Sessions Seriously on Penetration Tests
    Raxis Lead Penetration Tester Matt Dunn explains why you simultaneous sessions is a significant finding on a penetration test.
    Raxis Research Team April 8, 2022
  • Web App Testing: Part Two

    What is Web App Pentesting? (Part Two)
    Lead penetration tester Matt Dunn continues his discussion about web application testing. In Part Two, Matt explains testing as an authenticated user vs. as an unauthenticated user.
    Raxis Research Team March 4, 2022
  • Web App Testing: Part One

    What is Web Application Penetration Testing?
    Learn how Raxis approaches web application testing and how it differs from network penetration testing. Lead penetration tester Matt Dunn explains in this post.
    Raxis Research Team February 18, 2022
  • Matt Dunn Mathur

    Reporting Tools for Large Penetration Tests
    ,
    Raxis lead penetration tester Matt Dunn has developed three new tools to make it easier to compile and present findings from large penetration tests.
    Raxis Research Team February 11, 2022