Stay updated with the newest cybersecurity articles and insights.
Learn to set up ADAudit Plus vulnerability debugging environment, configure debug parameters, and get PostgreSQL database user passwords (adap, postgres) with this guide.
Read ADAudit Plus Vulnerability Debugging Environment Setup
Step-by-step guide to setting up GoAnywhere MFT vulnerability debugging environment: installation, Tomcat debug config, Apache Derby database access & operations.
Read GoAnywhere Managed File Transfer Vulnerability Debugging Environment Setup
Guide to Exchange PowerShell remote access penetration technique (fixed in CVE-2022-41040): implementation details, ProxyShell, NTLM auth & Python3 code tweaks for command execution.
Read Penetration Technique: Remote Access to Exchange PowerShell
Detailed analysis of ADAudit Plus data encryption: encrypted data location, bcrypt breakdown, domain/non-domain user distinction, and brute-force exploitation possibility.
Read ADAudit Plus Exploitation Analysis — Data Encryption Analysis
Master Fortigate identification (management vs VPN pages) & version detection with Python. Includes step-by-step details, code examples, and open-source scripts for penetration basics.
Read Penetration Basics: Fortigate Identification and Version Detection
Learn the differences between NTLM and Net-NTLM hashes in Windows, how they are generated, and methods for cracking them using tools like Hashcat and Mimikatz.
Read Introduction to Windows Password Hashes - NTLM Hash and Net-NTLM Hash
Learn how to bypass firewall restrictions using IIS port sharing and WinRM for remote server management on ports 80/443, including methods for high and low privileges.
Read Bypassing firewall using IIS port sharing feature
Learn how to recover passwords stored in Group Policy via SYSVOL, analyze exploitable aspects, and get defense tips for domain security.
Read Domain Penetration - Recovering Passwords Stored in Group Policy via SYSVOL
Learn stealth techniques for Windows Remote Assistance exploitation, including hidden interfaces, simulated clicks, and detection methods for security testing.
Read Penetration Techniques - Stealth Execution of Windows Remote Assistance
Learn to exploit nine Windows privileges like SeImpersonatePrivilege for privilege escalation. Techniques include token theft, NTLM relay, and open-source tools for penetration testing.
Read Penetration Techniques - Exploitation of Nine Windows Privileges
Learn how to use Kerberos pre-authentication for stealthy user enumeration and password brute-forcing without generating 4625 logs, with Python implementation tips.
Read Penetration Techniques - User Enumeration and Password Brute-forcing via Kerberos Pre-Authentication
Learn about Net-NTLMv1 encryption, vulnerabilities, and how to crack it using hashcat. Step-by-step guide for security testing in Windows environments.
Read Introduction to Net-NTLMv1: Password Hash in Windows