Stay updated with the newest cybersecurity articles and insights.
Learn to use requests_ntlm for NTLM authentication in EWS development. Includes hash-based auth, session optimization, and email automation code examples.
Read Exchange Web Service (EWS) Development Guide 6 – requests_ntlmLearn how to bypass AppLocker using PowerShell's Assembly Load and LoadFile methods. Reproduce bohops and Casey Smith techniques, analyze differences, and summarize exploitation.
Read Analysis and Summary of Bypassing AppLocker Using Assembly Load & LoadFileExplore Invoke-PSImage for hiding PowerShell code in PNG pixels. Learn steganography principles, script analysis, and optimization tips for security testing.
Read Invoke-PSImage Utilization Analysis
Learn how LUA scripts can bypass AppLocker, including testing methods, bypass principles, and defense strategies for Windows systems.
Read Testing and Analysis of Bypassing AppLocker Using LUA Scripts
Learn how to automate email and attachment downloads using IMAP in penetration testing, with Python code examples for Exchange servers.
Read Penetration Basics - Reading Emails Using the IMAP Protocol
Learn how to obfuscate strings using Unicode Braille Patterns to evade static detection in penetration testing. Includes encoding/decoding methods and implementation.
Read Penetration Basics - Obfuscating Strings Using Unicode EncodingExtend Exchange one-liner backdoors with in-memory PE loading to dump LSASS password hashes. Learn exploitation techniques and defense strategies.
Read Penetration Basics - Extension of Exchange One-Liner Backdoor
Step-by-step guide to install and configure GoAnywhere Managed File Transfer for vulnerability debugging, including database operations and debugging setup.
Read Setting up GoAnywhere Managed File Transfer Vulnerability Debugging EnvironmentLearn to enable Zimbra pre-authentication, generate PreAuthKey, and implement SOAP login with Python code for secure mailbox access.
Read Zimbra SOAP API Development Guide 6 - Pre-authenticationAnalysis of ProxyShell exploitation techniques for adding users and writing files on Exchange servers, including PowerShell remoting and file export methods.
Read ProxyShell Exploitation Analysis 3 - Adding Users and File WritingLearn how regular domain users can obtain DNS records using LDAP and DNS queries, with tools like SharpAdidnsdump and dns-dump for penetration testing.
Read Domain Penetration - Obtaining DNS Records with Regular User PrivilegesExplore USN Journal in NTFS files for penetration techniques, reading methods, exploitation approaches, and forensic recommendations in Windows systems.
Read Penetration Techniques - USN Journal of NTFS Files in Windows