Stay updated with the newest cybersecurity articles and insights.
Learn how to remotely access Exchange PowerShell using NTLM authentication, bypassing domain restrictions. Includes Python3 implementation details.
Read Penetration Techniques - Remote Access to Exchange PowerShell
Learn how to bypass UAC on Windows 10/8 using SilentCleanup scheduled task. Exploit environment variables to hijack cleanmgr.exe for privilege escalation. Includes defense tips.
Read Study Notes of using SilentCleanup to bypass UAC
Learn techniques to extract local user hashes from Windows SAM database using online and offline methods, including mimikatz and syskey decryption.
Read Penetration Techniques - Obtaining Local User Hashes via SAM Database
Learn how to export Remote Desktop connection history on Windows systems for penetration testing, including current user, logged-in users, and all users via registry and PowerShell.
Read Penetration Techniques - Obtaining Remote Desktop Connection History on Windows Systems
Learn how to use SharpGen to integrate, restructure, and encrypt .NET assemblies with Roslyn. Includes setup, compilation, and utilization methods.
Read SharpGen Utilization Analysis
Learn to use Outlook MAPI for accessing Outlook resources, reading emails, and extending applications with C# code examples and open-source tools.
Read Outlook MAPI Development Guide
Learn how to get a complete list of installed programs using WMI and registry enumeration for penetration testing and system analysis.
Read Penetration Basics - Obtaining the List of Installed Programs on the Current System
Technical deep dive into Sophos XG Firewall CVE-2022-1040 authentication bypass exploit, covering local debugging, OpCode analysis, WAN/VPN exploitation, and mitigation via login disclaimer.
Read Sophos XG Firewall Authentication Bypass Vulnerability (CVE-2022-1040) Exploitation Analysis
Learn how rundll32 uses DLLs like url.dll to execute programs via OpenURL and ShellExecute. Includes batch scanning for exploitable DLLs and PowerShell scripts.
Read Analysis of Executing Programs Using rundll32
Analysis of ProxyShell's second vulnerability (CVE-2021-34523), covering CommonAccessToken generation and Exchange PowerShell Remoting exploitation techniques.
Read ProxyShell Exploitation Analysis 2 - CVE-2021-34523
Learn AS-REP Roasting: exploit users without Kerberos preauthentication to extract password hashes, crack with hashcat, and defend your domain.
Read Domain Penetration - AS-REPRoasting
Learn how to perform remote script execution via Group Policy Objects (GPO) in domain environments, including methods using GPMC and command-line tools.
Read Domain Penetration - Remote Execution via Scripts in GPO