Copyright © 2019 CyStack Security.

The future of Cybersecurity

An all-in-one platform that provides solutions to company’s cyber-threats.
Powered by Artificial Intelligence & Crowdsourced Security.
Get started

Trusted by 100+ customers

Our customers

Products

Explore our cyber-security products for your enterprise

DEFENSE

CyStack WhiteHub CyStack WhiteHub

Detect critical vulnerabilities in applications at low cost. Powered by Crowdsourced Security.

Learn more

CyStack WebShield CyStack WebShield

Automatically monitor website, detect fundamental vulnerabilities and prevent cyber attacks.

Learn more

DATA PROTECTION

CyStack CRM CyStack CRM

Monitor and detect abnormal events on CRM software using AI.

Learn more
Out platform

THREAT PREVENTION

CyStack Server CyStack Server

Detect and prevent illegal activities on server infrastructure.

Learn more

CyStack Enterprise CyStack Enterprise

Detect and prevent illegal activities & malware on local networks.

Learn more

DATA PROTECTION

CyStack CRM CyStack CRM

Monitor and detect abnormal events on CRM software using AI.

Learn more

Start for free

Request a DEMO

Case study

vntriplogo

Vntrip

Vntrip has protected their top-secret data including 500,000 users and 10,000 partners.

getflylogo

Getfly

Getfly has taken advantage of WhiteHub to ensures their system's continuation.

luxstaylogo

Luxstay

Luxstay has well-secured their customers' sensitive infomation from hackers.

News

11/7/2019

Static binary injection with high-level code

Giới thiệu Static binary injection là một kỹ thuật dùng để chèn những đoạn code từ ngoài vào trong một file thực thi để theo dõi hoặc thay đổi hành vi của chương trình trong quá trình chạy. Nếu là một kẻ tấn công, hắn có thể sử dụng kỹ thuật này để thực hiện việc lây nhiễm lâu dài, còn đối với người nghiên cứu bảo mật, đây sẽ là sự hỗ trợ tuyệt vời cho việc instrument các file thực thi. Hiện tại các tool thực hiện việc này chủ yếu đều là inject những đoạn mã assembly vào file thực thi và cũng c

9/12/2019

D-Link DNS-320 ShareCenter <= 2.05.B10 - Unauthenticated Remote code execution

CyStack Advisory IDCSA-2019-03CVE IDs CVE-2019-16057 [https://www.cvedetails.com/cve/CVE-2019-16057/]SeverityCriticalCVSS v2 Base10.0 Vendor's announcementLink [https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10123] Synopsis CyStack Security discovered a remote code execution vulnerability in the D-Link DNS-320 ShareCenter [http://sharecenter.dlink.com/products/DNS-320]device which its version is lower or equal 2.05.B10 . By exploiting the vulnerability, a remote,

8/11/2019

Subdomain takeover - Chapter two: Azure Services

As I described in the chapter one [https://blog.cystack.net/subdomain-takeover/] , we can control the content of a sub-domain d by  controlling the content of domain d1 that d points to through its CNAME record. Azure [https://azure.microsoft.com/en-us/], a popular cloud service offer many services that can create such a d1. In this article, I will go details about services of Azure that can be vulnerable and how I exploited in the wild, including: Traffic Manager Profile, Web App, Virtual Mach