Stay updated with the newest cybersecurity articles and insights.
Learn how attackers use WSUS servers for lateral movement via patch deployment, including setup, exploitation tools, and behavioral detection strategies.
Read Penetration Techniques - Lateral Movement via WSUS
Analyze Pupy's Windows features: installation, payload types (EXE, Python, PS1), connection methods, and post-exploitation modules for security testing.
Read Pupy Exploitation Analysis - Features on Windows Platform
Step-by-step guide to install Confluence on CentOS 7 with PostgreSQL. Includes database configuration, user setup, and security considerations.
Read Confluence Usage Guide
Learn methods to obtain Exchange GlobalAddressList in penetration testing, including OWA, EWS, MAPI over HTTP, and OAB techniques for extracting email addresses.
Read Penetration Techniques - Methods to Obtain Exchange GlobalAddressList
Learn how to exploit Excel's RegisterXLL method for DLL loading, add remote download capabilities, and use PowerShell/rundll32 for execution. Includes POC testing and evasion techniques.
Read Use Excel.Application object's RegisterXLL() method to load dll
Learn how to implement command-line email reading via OWA for Exchange penetration testing, including login, email retrieval, and attachment download using Python.
Read Penetration Basics - Command Line Implementation for Reading Exchange Emails via Outlook Web Access (OWA)
Learn how to implement remote execution via GPO scheduled tasks using command-line tools, including troubleshooting and script details for domain penetration testing.
Read Domain Penetration - Remote Execution via Scheduled Tasks in GPO (Command-line Implementation Principles and Script Details)
Learn how to use DCOM for remote program execution in domain environments, including exploitation methods, firewall tips, and defensive strategies for cybersecurity.
Read Domain Penetration - Executing Programs on Remote Systems Using DCOM
Learn how to implant backdoors into EXE files using The Backdoor Factory. Explore principles, code caves, payload injection, and practical testing for ethical hacking.
Read Implanting backdoors into EXE files using BDF
Learn how to bypass UAC using CLR hijacking and system CLSID exploits. Exploit .Net programs like gpedit.msc for privilege escalation without admin rights.
Read Use CLR to bypass UAC
Learn how to clear Last WebAdmin Sessions records on Sophos UTM devices through technical analysis, including research steps and implementation methods.
Read Sophos UTM Analysis - Clearing Last WebAdmin Sessions Records
Learn how to forge Authenticode signatures in PE files and hijack signature verification for backdoor execution. Exploit techniques with tools like SigThief and PowerShell.
Read Authenticode Signature Forgery - PE File Signature Forgery and Signature Verification Hijacking