4 min read
Domain Penetration - Obtaining DNS Records
Learn how to obtain DNS records in domain penetration after gaining DNS admin privileges using DNS Manager, dnscmd, and remote methods.
Read Domain Penetration - Obtaining DNS RecordsLatest News
Stay updated with the newest cybersecurity articles and insights.
4 min read
Penetration Techniques - Using PHP Scripts to Obtain Net-NTLM Hash from Browsers
Learn how to use PHP scripts to simulate Net-NTLM authentication and extract client Net-NTLM hashes for penetration testing and security analysis.
Read Penetration Techniques - Using PHP Scripts to Obtain Net-NTLM Hash from Browsers
5 min read
CIA Hive Beacon Infrastructure Replication 1 - Using Apache mod_rewrite for HTTP Traffic Distribution
Learn to replicate CIA Hive's HTTP traffic distribution using Apache mod_rewrite. Step-by-step guide for Windows and Ubuntu setups with .htaccess rules.
Read CIA Hive Beacon Infrastructure Replication 1 - Using Apache mod_rewrite for HTTP Traffic Distribution
4 min read
Testing the Permission Vulnerability in TeamViewer 13.0.5058
Testing and analysis of TeamViewer 13.0.5058 permission vulnerability. Includes POC verification, exploit methods, and defense recommendations for unauthorized access.
Read Testing the Permission Vulnerability in TeamViewer 13.0.5058
5 min read
Penetration Techniques - Remote Registry in Windows
Learn how to exploit Remote Registry in Windows for penetration testing, including enabling services, ACL modifications, and backdoor techniques in workgroup and domain environments.
Read Penetration Techniques - Remote Registry in Windows
4 min read
Analysis of UAC Bypass Exploitation by Mocking Trusted Directories
Learn how to bypass UAC by mocking trusted directories using Long UNC and DLL hijacking. Exploit analysis with winsat.exe and payload implementation.
Read Analysis of UAC Bypass Exploitation by Mocking Trusted Directories
5 min read
Penetration Techniques - Extracting Passwords from Dump Files Using Mimilib
Learn to extract passwords from kernel-mode dump files using Mimilib as a WinDbg plugin, including setup, exploitation, and defense tips.
Read Penetration Techniques - Extracting Passwords from Dump Files Using Mimilib
6 min read
Penetration Technique - Extracting User Plaintext Passwords via CredSSP
Learn how to extract plaintext Windows user passwords via CredSSP Group Policy exploit without lsass process manipulation. Includes principles, exploitation methods, and defense tips.
Read Penetration Technique - Extracting User Plaintext Passwords via CredSSP
4 min read
Use COM Object hijacking to maintain persistence——Hijack CAccPropServicesClass and MMDeviceEnumerator
Learn how to use COM object hijacking for persistence by targeting CAccPropServicesClass and MMDeviceEnumerator. No admin rights or reboot needed. Includes POC and defense tips.
Read Use COM Object hijacking to maintain persistence——Hijack CAccPropServicesClass and MMDeviceEnumerator
4 min read
Penetration Techniques - Exploitation of Clipboard in Windows
Explore Windows clipboard exploitation techniques: writing/reading methods, real-time monitoring for penetration testing, and pastejacking risks. Learn security implications.
Read Penetration Techniques - Exploitation of Clipboard in Windows
6 min read
Phishing credentials via Basic Authentication (phishery) exploitation test
Test phishery for phishing credentials via Basic Authentication. Learn setup, exploitation, and defense tips for this SSL-enabled HTTP server tool.
Read Phishing credentials via Basic Authentication (phishery) exploitation test
4 min read
Catalog Signature Forgery - Long UNC Filename Spoofing
Exploit Long UNC filenames to forge catalog signatures, copying attributes from system files to bypass security checks and deceive Windows.
Read Catalog Signature Forgery - Long UNC Filename Spoofing