Stay updated with the newest cybersecurity articles and insights.
Learn to export saved Firefox passwords using Network Security Services (NSS) with Python. Includes Master Password verification, NSS initialization, and decryption steps.
Read Exporting saved passwords from Firefox browser via Network Security ServicesLearn how VMware Tools script execution can be exploited for backdoor persistence in Windows VMs, with analysis and defense recommendations for penetration testers.
Read Penetration Basics - Backdoor Implementation Using VMware Tools
Learn how to bypass DEP using VirtualAlloc in Windows shellcode. Includes ROP chain construction, testing, and practical exploitation tips.
Read Windows Shellcode Study Notes - Bypassing DEP with VirtualAlloc
Step-by-step guide to NSA DanderSpiritz Trojan testing, covering generation, classification, and troubleshooting for security analysis.
Read NSA DanderSpiritz Testing Guide - Trojan Generation and Testing
Learn to generate Windows shellcode using Visual Studio. Methods include DEBUG mode extraction, ShellcodeCompiler tool, and C++ dynamic API calls for custom payloads.
Read Windows Shellcode Study Notes - Generating Shellcode via Visual Studio
Learn methods to reduce program privileges from SYSTEM to standard user in penetration testing, including tools like runas, lsrunas, CPAU, and SelectMyParent.
Read Penetration Techniques - Program Privilege Reduction Startup
Learn how to bypass Windows Attachment Manager using ADS removal and LNK file techniques. Exploit Zone.Identifier:$DATA to avoid untrusted file prompts.
Read An interesting way of bypassing Windows Attachment Manager
Learn how to perform DLL injection via APC to bypass Sysmon monitoring of CreateRemoteThread. Includes C++ and C# implementations, Sysmon config testing, and evasion methods.
Read DLL Injection via APC - Bypassing Sysmon Monitoring
Learn techniques to clear and bypass Windows logs for penetration testing, including wevtutil, NSA tools, and thread termination methods.
Read Penetration Techniques - Deletion and Bypass of Windows Logs
Learn to hijack .Net programs using AppDomainManager for persistence, including self-developed apps and system tools like PowerShell.
Read Use AppDomainManager to maintain persistence
Learn to hide processes on Windows 7 using global API hooks via AppInit_DLLs registry tweaks. Works instantly on x64/x86 without reboots.
Read Using global API hooks to hide processes on Windows 7 systems
Learn how sdclt.exe bypasses UAC in Windows 10 via registry modification, with testing insights and defensive strategies to detect and prevent attacks.
Read Study Notes of using sdclt.exe to bypass UAC