Stay updated with the newest cybersecurity articles and insights.
Step-by-step guide to set up VMware Workspace ONE Access vulnerability debugging environment, including OVA installation, SSH setup, and remote debugging configuration.
Read VMware Workspace ONE Access Vulnerability Debugging Environment Setup
Learn how to use CLR to maintain persistence without admin privileges, hijack all .NET programs, and develop a backdoor with POC and detection methods.
Read Use CLR to maintain persistence
Analysis of Windows backdoor exploitation methods from CIA Vault7 RDB, including VBR persistence, registry hijacking, and DLL injection techniques.
Read Analysis of Windows Backdoor Exploitation Methods in CIA Vault7 RDBLearn to enable anonymous access file shares on Windows via command line for penetration testing, data transfer, and payload delivery in internal networks.
Read Penetration Techniques - Enabling Anonymous Access Shares on Windows Systems via Command LineLearn to delete Windows EVT log records for a specific time period on XP systems via handle enumeration and DLL injection methods. Includes code examples.
Read Windows Event Viewer Log (EVT) Single Log Deletion (Part 3) — Deleting EVT Log Records for a Specified Time Period on the Current System
Learn Pass The Hash implementation for domain penetration: principles, tools like mimikatz, wmiexec, and Invoke-TheHash, with practical examples for security testing.
Read Domain Penetration - Implementation of Pass The HashLearn how to exploit AdminSDHolder for domain privilege escalation, including ACL modification, enumeration of protected accounts, and detection methods.
Read Domain Penetration - AdminSDHolderLearn how to delete log records from EVT files within a specified time range. Includes program approach, time_t to GMT conversion, and open-source code.
Read Windows Event Viewer Log (EVT) Single Log Deletion (Part 2) – Program Implementation for Deleting Log Records within a Specified Time Range from EVT FilesLearn to load PE files into memory using C# with SharpPELoader. Exploit techniques, 32/64-bit support, and Casey Smith's PELoader extension.
Read Loading PE files into memory via .NET
Learn how to exploit PowerShell command history for sensitive data in penetration testing, including export methods and defense strategies to protect credentials.
Read Penetration Techniques - Obtaining PowerShell Command History
Analyze GadgetToJScript for .Net program encapsulation in js/vbs, bypassing AMSI and .Net 4.8+ Assembly.Load blocks. Includes code analysis, payload testing modifications, and SILENTTRINITY integration.
Read GadgetToJScript Exploitation Analysis
Learn advanced exploitation of wlbsctrl.dll for privilege escalation and TSMSISrv.dll/TSVIPSrv.dll for backdoor attacks via SCM in Windows systems.
Read Expansion on the Exploitation of "Lateral Movement — SCM and DLL Hijacking Primer"