Stay updated with the newest cybersecurity articles and insights.
Explore token theft and exploitation techniques for Windows penetration testing, including Metasploit incognito, Invoke-TokenManipulation, and privilege escalation methods.
Read Penetration Techniques - Token Theft and Exploitation
Learn how to use NSA Smbtouch for batch detection of SMB/NBT vulnerabilities like EternalBlue in intranet environments. Step-by-step guide for defenders.
Read Intranet Security - Using NSA Smbtouch for Batch Detection of Intranet
Learn to delete single EVTX log records by stopping Eventlog service, releasing file handles, and modifying log files via C programming.
Read Windows XML Event Log (EVTX) Single Log Deletion (Part 3) – Deleting a Single Log Record from the Current System by Releasing File Handles
Learn how to establish tunnels using RDP via file sharing and rdp2tcp for network pivoting and bypassing firewall restrictions in penetration testing scenarios.
Read Penetration Techniques - Establishing Tunnels Using Remote Desktop Protocol
Learn to set up a Veeam Backup & Replication debugging environment, extract database credentials, and analyze CVE-2023-27532 vulnerability.
Read Setting Up Veeam Backup & Replication Vulnerability Debugging Environment
Learn to monitor WMI persistence in logs, test DiskCleanup UAC bypass on Windows 10, and use ExportsToC++ for DLL hijacking. Security insights included.
Read Study Notes Weekly No.1(Monitor WMI & ExportsToC++ & Use DiskCleanup bypass UAC)
Learn Windows ACL exploitation for penetration testing, including privilege escalation, backdoor techniques, and defensive detection using icacls and PowerShell.
Read Penetration Techniques - Access Control List in Windows
Learn how to compile Masscan, install WinPcap via command line, and use Masscan and Nmap on Windows for effective internal network penetration testing.
Read Penetration Techniques - Running Masscan and Nmap on Windows Platform
Analysis of ADAudit Plus data encryption, covering encryption locations, algorithm details, and implementation for password security in ManageEngine environments.
Read ADAudit Plus Analysis - Data Encryption Analysis
Learn how to bypass DEP on Windows 7 using VirtualProtect. Step-by-step guide on ROP chains, VS2012 configuration, and debugging with Immunity Debugger.
Read Windows Shellcode Study Notes - Bypassing DEP via VirtualProtect
Fix bugs in Windows shellcode extraction code, avoid global variables, ensure proper function order, and optimize C++ development for cross-environment compatibility.
Read Windows Shellcode Study Notes - Extraction and Testing of Shellcode
Learn PNG steganography techniques to hide payloads in images without affecting viewing. Analyze file structure, parse data chunks, and embed custom data securely.
Read Steganography Techniques - Hiding Payloads Using PNG File Format