Stay updated with the newest cybersecurity articles and insights.
Step-by-step guide to setting up vRealize Log Insight vulnerability debugging env: installation, remote debugging, Cassandra DB & admin password reset.
Read vRealize Log Insight Vulnerability Debugging Environment Setup
Comprehensive guide to setting up ADManager Plus vulnerability debugging environment, including config steps, PostgreSQL DB password retrieval (encrypted & decryption), and encryption algorithms.
Read Setting up a Vulnerability Debugging Environment for ADManager Plus
Learn two Zyxel firmware decryption methods: known plaintext attack (pkcrack) & password extraction via process tracking (zld_fsextract). Step-by-step insights for VPN50 firmware included.
Read Zyxel Firmware Decryption
Extend Exchange one-liner backdoor: learn in-memory PE/.NET loading, lsass hash export via Mimikatz, open-source code & defense tips for security pros
Read Penetration Basics — Extension of Exchange One-Liner Backdoor
Learn to use Zimbra SOAP API with Python for email server management, user operations, and admin tasks. Includes code examples and testing.
Read Zimbra SOAP API Development Guide
Learn how to exploit GPO scheduled tasks for remote execution in domain environments, covering GPMC, command-line methods, and Group Policy refresh techniques.
Read Domain Penetration - Remote Execution via Scheduled Tasks in GPO
Learn how to export saved passwords from Firefox browser, including storage methods, decryption principles, and tools like WebBrowserPassView for penetration testing.
Read Penetration Techniques - Exporting Saved Passwords from Firefox Browser
Step-by-step guide to set up a Password Manager Pro vulnerability debugging environment, covering installation, configuration, and database setup for security testing.
Read Password Manager Pro Vulnerability Debugging Environment Setup
Learn Zimbra SOAP API admin features: get user tokens, upload files via clientUploader, and detect logs with Python examples.
Read Zimbra SOAP API Development Guide 2
Learn how to use Java reflection to delete webshell .class files, preventing traces on servers. Includes AntSword-JSP-Template implementation.
Read Java Exploitation Techniques – Self-Deletion of Webshell Compiled Files via ReflectionAnalyze ProcessHider's implementation, code details, and detection methods for hiding processes in monitoring tools like Task Manager and Process Explorer.
Read ProcessHider Utilization Analysis
Learn to configure additional LSA protection, monitor Password Filter DLLs, and explore exploitation techniques for enhanced Windows security and threat detection.
Read Configure Additional LSA Protection to monitor Password Filter DLL