Stay updated with the newest cybersecurity articles and insights.
Explore AlwaysInstallElevated privilege escalation testing, issues with Metasploit, and solutions for effective exploitation in Windows environments.
Read Test Analysis of Privilege Escalation Using AlwaysInstallElevated
Learn how to implant backdoors into DLL files using BDF, exploit DLL hijacking, and implement defense strategies against such attacks.
Read Implanting Backdoors into DLL Files Using BDF
Learn to enumerate, add, and remove the password never expires attribute for domain users using userAccountControl bitwise operations for security and management.
Read Penetration Basics - The Password Never Expires Attribute for Domain Users
Learn to extract plaintext RDP passwords using RdpThief and Detours library for API hooking. Step-by-step guide for penetration testing.
Read Penetration Techniques - Extracting Plaintext Credentials from Remote Desktop Client
Learn to implement email operations with Zimbra SOAP API: view, send, and delete emails using Item ID and Search commands.
Read Zimbra SOAP API Development Guide 3 - Email Operations
Learn how to acquire and clear Windows file execution records from logs, registry, and files for penetration testing and defense. Covers ShimCache, event logs, and exploitation methods.
Read Penetration Techniques - Acquisition and Clearing of Windows System File Execution Records
Learn Java reflection techniques for modifying properties and enumerating JspServletWrapper instances in Zimbra environments. Step-by-step implementation guide.
Read Java Exploitation Techniques - Modifying Properties via Reflection
Learn how to achieve DCSync using a domain controller's MachineAccount password hash, including extraction methods and defense strategies for Active Directory security.
Read Domain Penetration - Using MachineAccount to Achieve DCSync
Learn how to exploit CVE-2021-31196 via Padding Oracle Attack to recover plaintext passwords from Exchange server cookies.
Read ProxyOracle Exploitation Analysis 2—CVE-2021-31196
Learn how Password Filter DLLs can be exploited in penetration testing to capture plaintext passwords and implement backdoors on Windows systems.
Read Application of Password Filter DLL in Penetration TestingAnalyze Invoke-WScriptBypassUAC from Empire for UAC bypass on Win7. Learn exploitation principles, manual testing steps, and defense insights for penetration testing.
Read Analysis of Invoke-WScriptBypassUAC Exploitation in Empire
Analyze Gootkit Trojan's unique backdoor startup via INF files and registry exploits. Learn detection and defense strategies against this banking malware.
Read Analysis of Backdoor Exploitation in Gootkit Banking Trojan