Stay updated with the newest cybersecurity articles and insights.
Learn how to implement Mimikatz's sekurlsa::wdigest module to extract plaintext passwords from lsass across Windows versions, including Win7 to Win10.
Read Implementation of sekurlsa::wdigest in Mimikatz
Learn to bypass regsvr32 interception using odbcconf, export DLL functions with PowerShell Get-Exports, and implement USB keyboard keystroke logging via ETW.
Read Study Notes Weekly No.3(Use odbcconf to load dll & Get-Exports & ETW USB Keylogger)
Learn to delete single EVTX log records by injecting DLL into Eventlog service, obtaining file handles, and modifying logs via memory mapping. Step-by-step guide with code.
Read Windows XML Event Log (EVTX) Single Log Entry Deletion (Part 4) – Deleting a Single Log Record from the Current System by Obtaining Log File Handle via Injection
Learn how to retrieve plaintext passwords from Windows Credential Manager during penetration testing, covering domain and generic credentials with practical methods.
Read Penetration Techniques - Information Retrieval from Windows Credential Manager
Learn how attackers use Boolang language to execute shellcode, analyze exploitation techniques, and discover defensive detection strategies.
Read Exploitation Analysis of Executing Shellcode via Boolang Language
Learn how to acquire PPTP passwords via command line in Windows, connect to PPTP on Windows/Kali, and brute-force PPTP passwords using open-source tools for penetration testing.
Read Penetration Techniques - Acquisition and Brute-Force of PPTP Passwords
Learn how to implement IE browser hijacking using BHO for network connection simulation, bypassing security products. Includes development steps and exploitation approaches.
Read Implementing IE Browser Hijacking Using BHO
Learn methods to obtain NTDS.dit from domain controllers using Volume Shadow Copy, including ntdsutil, vssadmin, and vshadow.exe for security testing.
Read Domain Penetration - Obtaining the NTDS.dit File from Domain Controller Servers
Learn how to use Microsoft-signed msxsl.exe to bypass AppLocker and execute JScript/VBScript code, including shellcode and exploits.
Read Use msxsl to bypass AppLockerLearn how to move laterally from VMware ESXI to Windows VMs using snapshot techniques, commands, and volatility analysis for security testing.
Read Penetration Techniques - Lateral Movement from VMware ESXI to Windows Virtual Machines
Learn to access MailEnable mail using Python scripts. This guide covers setup, version detection, user login, and folder management with open-source code.
Read MailEnable Development GuideLearn to generate malicious ViewState for DotNet deserialization attacks, exploit Exchange file permissions, and implement XAML payloads for RCE.
Read DotNet Deserialization - Program Implementation for Generating ViewState