Tag
high
threat
B2B Platform Paywall Bypass via Client-Side Boolean Manipulation
2 TTPsAn autonomous Red Agent discovered a critical business-logic flaw in a B2B platform's data API, allowing free-tier users to bypass the paywall and access premium, unmasked contact data for over 600 million profiles by adding a boolean flag, `unmaskContactData: true`, to standard API requests, due to the backend accepting client-controlled parameters without verifying user entitlements.
Red Agent
business-logic-flaw
authorization-bypass
api-security
red-team
data-collection
2t
medium
advisory
Discussion of EDR Killers on Reddit
2 rules 2 TTPsA Reddit post on r/blueteamsec references an ESET WeLiveSecurity article discussing EDR killer techniques that extend beyond driver manipulation.
Endpoint Detection and Response
edr-evasion
defense-evasion
red-team
2r
2t