Let me introduce you to Active directory and familiarize with it’s components like trees, forest and trust relations Introduction Active Directory (AD) i...

FortiGuard Labs detected an attack exploiting the CVE-2021-40444 vulnerability in Microsoft Office, which allows attackers to execute malicious code via sp...

Let’s learn about Authentication, Authorization, Access Control, Users, KRGBT, Golden ticket attack and more. Active Directory (AD) authentication is a W...

Let’s learn about generic reconnaissance & Enumeration in AD - Using AD Module, Bloodhound, PowerView & Adalanche The process of finding a Domai...

Let’s learn about broadcast poisoning in AD - LLMNR Poisoning Or Link-Local Multicast Name Resolution Poisoning is an attack technique commonly used duri...

Let’s learn about Lateral movement, privilege escalation and some amazing tools that you can add to your arsenal Introduction Once inside the network, t...

Introduction Linux users often take pride in their ability to compile their own code. In spite of this, a subtle yet critical attack vector has existed fo...

Introduction Snort is an open source Intrusion Prevention System (IPS) that detects malicious network traffic by comparing the network packets to a set of...

If you’re anything like me, you discovered Impacket, either through a course, Ippsec, or your own research, and you look at the scripts. Your grin turns...

In June, we wrote about Akira – a ransomware group using double extortion techniques to coerce victims after stealing and encrypting their sensitive data....

Active Directory Certificate Services ADCS is used for managing public key infrastructure in an Active Directory environment. It’s commonly used in enter...

Ransomware as a Service (RaaS) platforms continue to emerge, causing a significant impact across industries and organisations. They’re enabling inexperien...

For years, quantum computing has been a vision of the future. It’s a technology that has been far away – a distant promise of computing power far beyond ou...

We’re focused on… How much money threat actors are asking for when they execute ransomware attacks. Ransom sums can vary wildly At time of writing, the...

If you want to pursue your career as an SOC analyst, you can get hand- off experience for free by setting up your own SIEM labs. Here’s how I did it. What is...

The Checkra1n jailbreak has revolutionised the landscape of iOS jailbreaking and security research. Leveraging the powerful checkm8 bootrom exploit, Checkr...