Stay updated with the newest cybersecurity articles and insights.
Learn how to clear single file execution records in RecentFileCache.bcf and Amcache.hve on Windows systems for penetration testing and forensic analysis.
Read Penetration Techniques - Clearing Single Records in RecentFileCache.bcf and Amcache.hve
Learn how to delete single log entries from EVTX files with detailed programming steps, including handling intermediate, first, and last log deletions.
Read Windows XML Event Log (EVTX) Single Log Deletion (Part 2) – Program Implementation for Deleting Single Log Records in EVTX Files
Learn to delete single Windows EVTX log entries by obtaining log file handles via DuplicateHandle and process enumeration techniques.
Read Windows XML Event Log (EVTX) Single Log Entry Deletion (Part 5) – Deleting a Single Log Entry from the Current System by Obtaining Log File Handle via DuplicateHandle
Step-by-step guide to exploit Zimbra CVE-2019-6980 deserialization vulnerability for remote code execution. Includes environment setup, payload generation, and open-source exploit script.
Read Zimbra Deserialization Vulnerability (CVE-2019-6980) Exploitation TestLearn to hide ASP.NET webshells using VirtualPathProvider for virtual files, exploit Exchange vulnerabilities, and implement defensive detection strategies.
Read Penetration Techniques - Hiding ASP.NET Webshells Using Virtual FilesLearn how to exploit Java JNI to load DLLs via JSP in Tomcat environments, including code examples for command execution and security implications.
Read Java Exploitation Techniques – Loading DLL via JNI
Learn methods to extract credentials from lsass.exe, including bypassing security restrictions and handling file size limits in penetration testing.
Read Penetration Basics - Extracting Credentials from lsass.exe Process
Test and analysis of Juicy Potato, a Windows local privilege escalation tool. Covers usage, limitations, and defense strategies for exploiting SeImpersonate/SeAssignPrimaryToken privileges.
Read Windows Local Privilege Escalation Tool Juicy Potato Testing AnalysisLearn how to use Node.js C++ addons to hide payloads in penetration testing, increasing analysis difficulty and leveraging C++ code.
Read Node.js in Penetration Testing: Using C++ Addons to Conceal Actual Code
Technical analysis of ProxyOracle attack chain: XSS reproduction, HttpOnly cookie bypass using SSRF, XSS platform setup, and email spoofing techniques.
Read ProxyOracle Exploitation Analysis 1 - CVE-2021-31195Learn how to escalate from Exchange file read/write permissions to command execution using .NET deserialization and MachineKey manipulation. Includes exploitation methods and defense tips.
Read Penetration Techniques - From Exchange File Read/Write Permissions to Command ExecutionLearn how to exploit Jetty with Servlet memory shells for command execution. Includes code and implementation details for security testing.
Read Java Exploitation Techniques - Jetty Servlet Type Memory Shell