This article explores how ESC17 certificate abuse revives an old GLPI agent tactic, enabling attackers to achieve RCE without needing access to the GLPI server.
This blog post quickly outlines the MCP protocol before presenting a Burp Suite extension developed by Fenrisk that enables pentesters to effectively test MCP servers.
Here is an article detailing the various reasons for using Signal (or another alternative) rather than WhatsApp. The primary purpose of this blog post is to enable me to refer anyone who asks me this question on a daily basis to it.