Stay updated with the newest cybersecurity articles and insights.
Learn to set up a Sophos XG vulnerability debugging environment, including Jetty debugging, CSC file decryption, and PostgreSQL database access.
Read Sophos XG Vulnerability Debugging Environment Setup
Learn methods to persistently access Exchange user inbox emails via forwarding rules and permissions. Includes defense tips for securing email data after password leaks.
Read Penetration Basics - Methods to Continuously Obtain Exchange User Inbox Emails
Explore four stealthy Office backdoor methods for Word, Excel, and PowerPoint, with a PowerShell POC script for automation, advantages comparison, and defense strategies.
Read Use Office to maintain persistence
Learn to automate email and attachment downloads with EWS using SOAP XML. Includes keyword/date search, NTLM auth, and open-source Python code.
Read Exchange Web Service (EWS) Development Guide 4 – Auto DownloaderTechnical analysis of APT34's leaked PoisonFrog and Glimpse tools, covering PowerShell Trojans, Node.js C2 servers, and DNS tunneling techniques.
Read Analysis of APT34 Leaked Tools - PoisonFrog and Glimpse
Learn how MSDTC service DLL hijacking enables persistence, bypasses Autoruns, and methods for detection and defense in Windows environments.
Read Use msdtc to maintain persistence
Learn how to bypass Windows command line process auditing using SwampThing. Modify process parameters to evade Event ID 4688 logging with step-by-step implementation and defense tips.
Read Penetration Techniques - Bypassing Windows Command Line Process Auditing
Learn how to hijack explorer.exe via COM object MruPidlList for persistence. Explains registry manipulation, DLL loading, and defense against COM hijacking attacks.
Read Use COM Object hijacking to maintain persistence——Hijack explorer.exe
Learn to add administrator users in vSphere via LDAP database on vCenter, including exploitation methods and program implementation steps.
Read vSphere Development Guide 5 - LDAP
Learn how Mimikatz SSP extracts plaintext passwords from lsass, develop custom SSPs, and bypass Windows restrictions for credential access.
Read Usage of SSP in Mimikatz
Analyze Pupy's screen control feature on Windows, covering UAC issues, implementation methods, and an alternative approach using HTTP-Remote-Desktop-Server for secondary development.
Read Pupy Exploitation Analysis - Screen Control on Windows Platform
Learn how to implement an Office backdoor using VSTO, bypass whitelisting, and detect such threats. Step-by-step exploitation and security analysis.
Read Office backdoor implemented using VSTO