Research articles

Find all the latest from the NCC Group Research team

Public Reports

A WarCon 2017 Presentation: Cisco ASA – Exploiting the IKEv1 Heap Overflow – CVE-2016-1287

Cedric Halbronn

26 Oct 2026

ASYNCing Feeling: When Your Download Comes with Something Extra

Asher Glue

Dillon Ashmore

Rodrigo Munoz

Guus Beckers

Bas Jansen

Peter Gurney

26 Oct 2026

Advanced SQL Injection in SQL Server Applications

NCC Group Publication Archive

26 Oct 2026

Assessing IIS Configuration Remotely

NCC Group Publication Archive

26 Oct 2026

Analysis of Boomerang Differential Trials via a SAT-Based Constraint Solver URSA

NCC Group Publication Archive

26 Oct 2026

An Introduction to Fault Injection (Part 1/3)

NCC Group

26 Oct 2026

An offensive guide to the Authorization Code grant

Rami McCarthy

26 Oct 2026

Adventures in Xen Exploitation

Aaron Adams

26 Oct 2026

Analysing a recent Poison Ivy sample

Matt Lewis

26 Oct 2026

Alternative Approaches for Fault Injection Countermeasures (Part 3/3)

NCC Group

26 Oct 2026

Our Services

Assessment & Advisory

Detection & Response

Compliance

Academy

Remediation

Global Cyber Policy Radar

Research articles

A WarCon 2017 Presentation: Cisco ASA – Exploiting the IKEv1 Heap Overflow – CVE-2016-1287

ASYNCing Feeling: When Your Download Comes with Something Extra

Advanced SQL Injection in SQL Server Applications

Assessing IIS Configuration Remotely

Analysis of Boomerang Differential Trials via a SAT-Based Constraint Solver URSA

An Introduction to Fault Injection (Part 1/3)

An offensive guide to the Authorization Code grant

Adventures in Xen Exploitation

Analysing a recent Poison Ivy sample

Alternative Approaches for Fault Injection Countermeasures (Part 3/3)