Search the Community

This tool is meant to be used during Red Team Assessments and to audit the XDR Settings. With this tool its possible to parse the Database Lock Files of the Cortex XDR Agent by Palo Alto Networks and extract Agent Settings, the Hash and Salt of the Uninstall Password, as well as possible Exclusions. Supported Extractions Uninstall Password Hash & Salt Excluded Signer Names DLL Security Exclusions & Settings PE Security Exclusions & Settings Office Files Security Exclusions & Settings Credential Gathering Module Exclusions Webshell Protection Module Exclusions Childprocess Executionchain Exclusions Behavorial Threat Module Exclusions Local Malware Scan Module Exclusions Memory Protection Module Status Global Hash Exclusions Ransomware Protection Module Modus & Settings [hide][Hidden Content]]

TheHive Project Cortex versions 2.1.3 and below suffer from a server-side request forgery vulnerability. View the full article

Razer Cortex has a CEF debugger stub enabled by default allowing arbitrary remote command execution. View the full article