Stay updated with the newest cybersecurity articles and insights.
Explore msiexec exploitation in penetration testing, including creating malicious MSI files with Metasploit and Advanced Installer for payload delivery and command execution.
Read msiexec in Penetration Testing
Learn JPEG steganography techniques for hiding payloads, including DCT and LSB encryption, Exif manipulation, and tools like stegdetect and JPEGsnoop.
Read Steganography Techniques - Hiding Payloads Using JPEG File Format
Learn how to disable URL encoding in Python's Requests library for raw HTTP vulnerability testing, with a CVE-2022-44877 example.
Read Python Development Tips - Disabling URL Encoding in the Requests Library
Learn how to exploit Volume Shadow Copy for file recovery and creating fileless processes in penetration testing, including commands and techniques.
Read Volume Shadow Copy in Penetration Testing
Explore userland registry hijacking for persistence and BypassUAC. Learn to hijack scheduled tasks and modify HKCR keys via HKCU with standard user permissions.
Read Userland registry hijacking
Explore parameter hiding techniques in shortcut files, including lnk format analysis, Delphi/PowerShell POCs, and exploitation methods for bypassing 260-char limits.
Read Penetration Techniques - Parameter Hiding Techniques in Shortcut Files
Test record of Joomla 3.4.4-3.6.3 vulnerabilities CVE-2016-8869 and CVE-2016-8870, enabling unauthorized account creation and privilege escalation.
Read Joomla 3.4.4-3.6.3 Account Creation & Privilege Escalation Test Record
Step-by-step guide to setting up Veeam Backup & Replication vulnerability debugging environment (CVE-2023-27532): env setup, debugging steps, credential extraction.
Read Veeam Backup & Replication Vulnerability Debugging Environment Setup
Discover two WebLogic version detection methods (Admin Console & T3 protocol), Python automation steps, implementation details, and open-source code for WebLogic projects.
Read Penetration Basics — WebLogic Version Detection
Discover Minio version detection methods, Python automation implementation details, and get open-source code for penetration testing basics. Covers API auth and version checks.
Read Penetration Basics: Minio Version Detection
Discover Zimbra version detection methods (IMAP, URL, etc.), Python automation steps, development details, and open-source code for penetration testing learners.
Read Penetration Basics – Zimbra Version Detection
Python implementation of Exchange PowerShell commands (pypsrp), Kerberos auth details, and TabShell exploitation techniques for penetration testing.
Read Penetration Technique: Python Implementation of Exchange PowerShell