Stay updated with the newest cybersecurity articles and insights.
Learn to create a lightweight XSS platform using Python CLI for internal network penetration testing, featuring HTTPS server setup and data extraction.
Read Penetration Tool Development - Command Line Implementation of XSS Platform
Learn to build a SOAP XML parser for EWS to automatically extract email details like subject, sender, body, and attachments using Python's standard libraries.
Read Exchange Web Service (EWS) Development Guide 3 – SOAP XML Parser
Learn how to remotely extract credentials from lsass.exe using lsassy tool. Methods for remote command execution, parsing password hashes, and automation in penetration testing.
Read Penetration Basics - Remotely Extracting Credentials from the lsass.exe Process
Technical analysis of ProxyShell CVE-2021-34473 exploitation: SSRF vulnerability debugging, EWS impersonation via SID, and complete exploit chain for Exchange Server attacks.
Read ProxyShell Exploitation Analysis 1 - CVE-2021-34473Learn two Exchange backdoor methods via ASPX one-liners: memory loading and file upload. Includes C#/Python exploit code and defense tips.
Read Penetration Basics - Implementation of Exchange One-Liner Backdoor
Learn how to simulate IE browser for file downloads on Windows, including active/passive modes, COM objects, and process hollowing. Includes defense tips.
Read Penetration Techniques - Simulating IE Browser to Download Files
Technical analysis of SILENTTRINITY, a C# C2 tool using IronPython for stealthy payload execution. Covers implementation, usage, and defense strategies.
Read SILENTTRINITY Usage Analysis
Learn about Process Doppelganging, a Windows code injection technique that bypasses security products. Includes POC testing, exploitation steps, and defense tips.
Read Introduction to Process Doppelganging Exploitation
Learn to exploit MiniDumpWriteDump via COM+ Services DLL for process memory dumps. Includes PowerShell automation, permission handling, and exploitation analysis for penetration testing.
Read Exploitation Testing of "MiniDumpWriteDump via COM+ Services DLL"
Learn how to implement a Node.js downloader for penetration testing, covering file release, bypass techniques, and defense recommendations.
Read Node.js in Penetration Testing - Implementation of a Downloader
Learn how to use certutil for file downloads, hash calculation, and base64 encoding in penetration testing, with tips for clearing cache and common methods.
Read certutil in Penetration Testing
Explore Linux password storage in /etc/shadow, encryption methods like SHA-512, and cracking techniques using John the Ripper and hashcat for security testing.
Read Linux Password Hashes - Technical Overview of Encryption Methods and Cracking Techniques