Stay updated with the newest cybersecurity articles and insights.
Learn to bypass firewalls using IIS module functionality for remote server management. Explore C++ and C# module development, testing with IIS-Raid, and defense strategies.
Read Bypassing Firewalls Using IIS Module Functionality
Technical guide on acquiring and analyzing CIA Hive source code from WikiLeaks Vault8, covering framework, tools, and testing methods.
Read CIA Hive Testing Guide - Source Code Acquisition and Brief Analysis
Comprehensive testing and analysis of AVET, an antivirus evasion tool from BlackHat Arsenal. Learn setup, usage, and evasion techniques.
Read AntiVirus Evasion Tool (avet) Testing and Analysis
Learn to automate extraction of domain user login details (IP, timestamp) from Event ID 4624 logs using EventLogSession and WMI in C# for efficient security analysis.
Read Penetration Basics - Obtaining Domain User Login Information
Test Webmin <=1.920 RCE vulnerability (CVE-2019-15107). Learn to reproduce with Burp Suite, write Python POC, and secure your system.
Read Webmin<=1.920-Unauthenticated_RCE(CVE-2019-15107) Exploitation Test
Learn how to extract DPAPI MasterKeys on Windows systems using mimikatz, analyze Preferred files, and modify expiration times for security testing.
Read Penetration Techniques - Obtaining the MasterKey in DPAPI on Windows Systems
Learn advanced MSBuild techniques to execute PowerShell commands, PE files, shellcode, and achieve persistence in VisualStudio using inline tasks and XML files.
Read Use MSBuild To Do MoreLearn how to enable metadata publishing in WCF using basicHttpBinding, covering server setup, testing, and client development in .NET.
Read Windows Communication Foundation Development Guide 1 - Enabling Metadata Publishing
Learn how to select suitable C2 domains using expireddomains.net, fix CatMyFish bugs, and implement a Python crawler for penetration testing.
Read Penetration Basics - Choosing a Suitable C2 Domain
Learn how to obtain domain user password policies for penetration testing and detect brute-force attacks. Includes external and internal methods.
Read Penetration Basics - Obtaining Domain User Password Policies
Learn to exploit Exchange Autodiscover for password brute-forcing, reading config info, and accessing email resources in penetration testing scenarios.
Read Penetration Basics - Using Exchange Autodiscover
Explore WMI persistence methods using wmic.exe for system attacks and defense. Learn registry operations, information gathering, and security techniques in Windows environments.
Read Study Notes of WMI Persistence using wmic.exe