Server-side parameter pollution Some systems contain internal APIs that aren’t directly accessible from the internet. Server-side parameter pollution occu...

Before you start reading this post I’d like to point out that this is not a practical technique, no sane person would manually hunt for DPAPI blobs and d...

In a decisive effort to protect national security and maintain the integrity of its information and communication technology infrastructure, the United Sta...

Understanding Supply Chain Cyberattacks A supply chain cyberattack targets third-party vendors within an organization’s supply chain. Historically, these a...

“If you can’t decipher our data, then why are you here?” This is a common reaction when our team arrives. Now, let me explain everything while covering:...

Explore the internals of applications built using native ahead-of-time (AOT) compilation. The .NET 7 platform debuted a new deployment model: forward nati...

Security should be integrated into every stage of the software development lifecycle. Description The traditional Software Development Lifecycle (SDLC) foll...

Let me introduce you to Active directory and familiarize with it’s components like trees, forest and trust relations Introduction Active Directory (AD) i...

FortiGuard Labs detected an attack exploiting the CVE-2021-40444 vulnerability in Microsoft Office, which allows attackers to execute malicious code via sp...

Let’s learn about Authentication, Authorization, Access Control, Users, KRGBT, Golden ticket attack and more. Active Directory (AD) authentication is a W...

Let’s learn about generic reconnaissance & Enumeration in AD - Using AD Module, Bloodhound, PowerView & Adalanche The process of finding a Domai...

Let’s learn about broadcast poisoning in AD - LLMNR Poisoning Or Link-Local Multicast Name Resolution Poisoning is an attack technique commonly used duri...

Let’s learn about Lateral movement, privilege escalation and some amazing tools that you can add to your arsenal Introduction Once inside the network, t...

Introduction Linux users often take pride in their ability to compile their own code. In spite of this, a subtle yet critical attack vector has existed fo...

Introduction Snort is an open source Intrusion Prevention System (IPS) that detects malicious network traffic by comparing the network packets to a set of...

If you’re anything like me, you discovered Impacket, either through a course, Ippsec, or your own research, and you look at the scripts. Your grin turns...