Stay updated with the newest cybersecurity articles and insights.
Learn to extract saved Chrome passwords offline using Masterkey without needing user plaintext passwords. Covers DPAPI, LSASS, and practical steps.
Read Penetration Techniques - Offline Extraction of Saved Passwords in Chrome Browser Using Masterkey
Learn SSH penetration basics: bypass logs, brute force techniques, and defensive detection methods for secure remote access testing.
Read Penetration Basics - Bypassing SSH Logs
Explore how Transport Agent in Microsoft Exchange can be exploited as a backdoor for reading, modifying, and blocking emails, with defense tips.
Read Penetration Techniques - Using Transport Agent as an Exchange Backdoor
Learn how to recover and securely delete files in Windows systems using NTFS principles, PowerForensics, and SDelete for penetration testing.
Read Penetration Techniques - File Recovery and Deletion in Windows Systems
Learn how to delete single logs in Windows EVT files. Covers EVT format basics, deletion approach, and practical examples for Windows XP/2003 systems.
Read Windows Event Viewer Log (EVT) Single Log Deletion (Part 1) – Deletion Approach and Examples
Explore Covenant, a .NET-based C2 framework with dynamic compilation, setup guides for Windows, key features like Listeners and Launchers, and detection insights.
Read Covenant Utilization Analysis
Learn how attackers use modified icon files and SCF files to trick users into accessing spoofed file servers, capturing NTLMv2 hashes for password cracking.
Read Penetration Techniques - Using Icon Files to Obtain NTLMv2 Hash from File Server Connections
Learn how to export Chrome saved passwords offline using DPAPI, NTLM hash, and Master Key decryption techniques for penetration testing.
Read Penetration Techniques - Offline Export of Passwords Saved in Chrome Browser
Learn how tscon can bypass RDP authentication for unauthorized login, with exploitation examples and defense strategies for Windows systems.
Read Penetration Technique - Using tscon to Achieve Unauthorized Remote Desktop Login
Learn how to enable multi-user remote desktop on non-server Windows systems using mimikatz and registry tweaks for penetration testing.
Read Penetration Techniques - Multi-user Login for Windows Remote Desktop
Learn how RID hijacking exploits Windows registry to escalate account privileges by modifying RID values, enabling unauthorized admin access.
Read Penetration Techniques - RID Hijacking of Windows Accounts
Learn how to capture Net-NTLM hash via HTTP protocol, analyze exploitation prerequisites, and implement defense strategies in Windows environments.
Read Penetration Techniques - Obtaining Net-NTLM Hash via HTTP Protocol