https://blog.ret2.me/Recent content on ret2.meHugo -- gohugo.ioen-usThu, 04 Dec 2025 00:00:00 +0000https://blog.ret2.me/post/2025-12-04-exploiting-netsupport-gateway/Thu, 04 Dec 2025 00:00:00 +0000https://blog.ret2.me/post/2025-12-04-exploiting-netsupport-gateway/Earlier this year, I encountered a few incidents where the NetSupport remote access tool was abused in “ClickFix” style attacks. Abuse of remote access tools is nothing new, and similar campaigns have been well documented. However, it did prompt me to look into the software further and hunt for any interesting forensic artefacts/bugs. As a result, three vulnerabilities were identified and reported to NetSupport with the assistance of VulnCheck (CVE-2025-34179, CVE-2025-34180, and CVE-2025-34181).https://blog.ret2.me/post/2022-01-26-exploiting-xiongmai-dvrs/Wed, 26 Jan 2022 00:00:00 +0000https://blog.ret2.me/post/2022-01-26-exploiting-xiongmai-dvrs/As part of my work at FortNet I’ve had the chance to research some embedded devices. This provided a good chance to learn more about the ARM architecture and the differences between ARM and x86 exploitation. Often, IoT is overlooked in threat assessments due to most consumer devices acting as black boxes with closed source code. Threat actors have and will continue to use exploits in embedded devices for initial access to networks.https://blog.ret2.me/about/Mon, 01 Jan 0001 00:00:00 +0000https://blog.ret2.me/about/Etiam porta sem malesuada magna mollis euismod. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Donec id elit non mi porta gravida at eget metus. Donec sed odio dui. Donec sed odio dui. Nulla vitae elit libero, a pharetra augue. Nulla vitae elit libero, a pharetra augue. Praesent commodo cursus magna, vel scelerisque nisl consectetur et. Nulla vitae elit libero, a pharetra augue.