English
Tanto Security
Report

Tanto Security

@TantoSecurity

Tanto Security is a leading provider of advanced offensive cyber security services to leading organisations across Australia, New Zealand and North America.

89 Following533 Followers215 Posts
  1. Tanto Security@TantoSecurity
    🚨🚨🚨 From Arbitrary File Read to Shell: Yet Another RCE in Telerik In that post, we exploit an arbitrary file read via RadImageEditor's image cache to leak web[.]config and, if it contains the right secrets, turn it into RCE! Update now to 2026.3.812.
    015653K
  2. Tanto Security@TantoSecurity
    We are beyond giddy to be releasing tturl, the HTTP/2 CLI for finding tiny timing differences and winning request races. Our Director of Research @justinsteven can't wait to tell you all about it at @BSidesCbr today, 3:15PM on the main stage 😎
    0611646
  3. Tanto Security@TantoSecurity
    The entire Tanto Security team will be at @BSidesCbr this wk. We look forward to catching up with friends and supporting our colleagues who are getting up on stage... and we'll have lots of them! With SEVEN talks. Plus we got swaggggg to give away.
    Download
    028602
  4. Tanto Security@TantoSecurity
    Tanto Security
    RT @BSidesCbr: Four years running! @TantoSecurity has sponsored BSides Canberra every year since 2023 and they contribute some pretty amazing talks along the way. Thanks for continuing to support BSides both on and off the stage! ❤️
    0101
  5. Tanto Security@TantoSecurity
    Tanto Security
    RT @TheHackersNews: 🚨 A public Telerik UI PoC chains a padding oracle into unauthenticated RCE. TantoSec’s exploit for RadAsyncUpload forges encrypted state and loads a DLL, but only on specific non-default configurations. Inside the chain →
    01703
  6. Tanto Security@TantoSecurity
    🚨🚨🚨🚨🚨🚨 From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP[.]NET AJAX The vulnerabilities described in this post were discovered, analysed, and exploited with some AI assistance, and a lot of old-fashioned human persistence.
    15918132.1K
  7. Tanto Security@TantoSecurity
    Our brilliant and talented Sam picked up a 4G industrial router from a second hand store, and as they say in the biz, what he found will shock you. Check out the blow-by-blow as he wound up logged in to a "fake" root account. Full dets over on the blog:
    013218
  8. Tanto Security@TantoSecurity
    Tanto Security
    RT @corelanc0d3r: 🔥ℝ𝕖𝕒𝕕𝕪 𝕥𝕠 𝕓𝕣𝕖𝕒𝕜 𝕥𝕙𝕖 𝕤𝕥𝕒𝕔𝕜 𝕒𝕟𝕕 𝕡𝕨𝕟 𝕥𝕙𝕖 𝕙𝕖𝕒𝕡? Corelan Stack (Feb 3-6) + Heap (Feb 9-12) in Melbourne 🇦🇺 — the ultimate exploit dev combo, back to back 💥 Do both = earn your shot at CCED 😈 Seats 👉  💛 Sharing = caring
    010912
  9. Tanto Security@TantoSecurity
    Are you going to be in or around Wellington on the 7th-8th November? Are you a student or currently unwaged? TantoSec wants to get you to Kawaiicon❤️ We have tickets to give away. They cover entry to the con only. Travel & accom aren't included. Send us a DM if you can make it😎
    Download
    023329
  12. Tanto Security@TantoSecurity
    Tanto Security ❤️ @DownUnderCTF - and when they asked us if we could do a pentest of their new brand new CTF scoreboard we knew we had to say yes. With their permission we are proud to release the full pentest report today! 👇
    149918
  13. Tanto Security@TantoSecurity
    Posts @TantoSecurity
    @DownUnderCTF have published their annual infra writeup at and today's an extra special day, because they're open sourcing their scoreboard, noCTF! 🎉 we think it's pretty dang good (and probably pretty secure)
    103170
  14. Tanto Security@TantoSecurity
    Posts @TantoSecurity
    We think @DownUnderCTF does incredible work, and Tanto Security is proud to have been a sponsor since 2023. Thank you friends for letting us pentest your new scoreboard, and we'll see you for DownUnderCTF 7 in 2026 🫡
    003137
  15. Tanto Security@TantoSecurity
    🚆🚄🚅🚉🛤️🚃🚂 Training Alert! We are partnering with @corelanc0d3r to bring his amazing exploit dev workshop to Melbourne for the first time. Want to take your exploit dev to the next level? Check out Early Bird Discounts if you get in before October 1
    0571.3K
  16. Tanto Security@TantoSecurity
    Always happy to be back supporting Australia's greatest HackerCon 🥷
    BSidesCanberra @BSidesCbr
    A big thank you to Silver sponsor & long-time friend, @TantoSecurity. They’re back for their third year supporting BSides Canberra and the community, and have also contributed accepted talks to this year’s conference. More at:
    106334
  17. BSidesCanberra@BSidesCbr
    A big thank you to Silver sponsor & long-time friend, @TantoSecurity. They’re back for their third year supporting BSides Canberra and the community, and have also contributed accepted talks to this year’s conference. More at:
    Download
    014684
  18. Tanto Security@TantoSecurity
    Our Technical Director and co-founder @marcioalm will be at the Melbourne AppSec & DevSecOps Summit next week! He'll be pondering the changing nature of software assurance alongside @jksdua and friends of TantoSec @volvent and @pamoshea
    Download
    125429
  19. Tanto Security@TantoSecurity
    Posts @TantoSecurity
    Tickets are free for practicing professionals. Come along and learn yourself an AppSec!
    000101
  20. Tanto Security@TantoSecurity
    It's blog post day! 🎉 Our email whisperer Ben Wilson has distilled his Outlook email spoofing journey from @BSidesCbr 2024 into a terrific post, walking you through the process of exploring niche email tricks that bypass anti-spoofing controls 👇
    Download
    245715
  21. Tanto Security@TantoSecurity
    Posts @TantoSecurity
    He ends up delivering a perfectly spoofed email, indistinguishable from one that would have been sent from within the victim organisation. Some of the tricks have been patched 🥳 some tricks haven't 👀 so grab a cup of tea and get busy reading 😁
    003117
  22. Show more posts