A team of dedicated security professionals helping to make the world more secure, one organization at a time.

Raxis Attacks. Raxis Protects. Raxis gives back to the security community. We contribute with public CVE disclosures, Metasploit modules, and exploit walkthroughs to share our knowledge and help everyone understand security.

• CVE-2022-26777: ManageEngine Remote Access Plus Guest User Insecure Direct Object References
• CVE-2022-26653: ManageEngine Remote Access Plus Guest User Insecure Direct Object References
• CVE-2022-25373: ManageEngine Support Center Plus Stored XSS
• CVE-2022-25245: ManageEngine Asset Explorer Information Leakage
• CVE-2022-24681: ManageEngine AD Self Service Plus Stored XSS
• CVE-2021-38156: Nagios XI Stored XSS
• CVE-2021-29643: PRTG Network Monitor Stored XSS
• CVE-2021-31813: ManageEngine Applications Manager Stored XSS
• CVE-2021-28382: ManageEngine Key Manager Plus Stored XSS
• CVE-2021-27956: ManageEngine AD Self Service Plus Stored XSS

• Azure AD Login Scanner
• Microsoft RD Web Access Timing Attack

• Dirty Pipe Exploit Walkthrough
• Log4J Exploit Walkthrough

• Reporting Tools