In the world of cybersecurity, it’s important to understand what attack surfaces exist. The best way to understand something is by first doing it. Whether you’re an aspiring penetration tester, […]

In this video, John Strand and his team discuss the challenges of setting up and running wireless labs, particularly focusing on the issues faced during Wild West Hackin’ Fest events. They highlight the development of an open-source project aimed at virtualizing…

Go-Spoof brings an old tool to a new language. The Golang rewrite [of Portspoof] provides similar efficiency and all the same features of the previous tool but with easier setup and useability.

Volatility is a memory forensics tool that can pull SAM hashes from a vmem file. These hashes can be used to escalate from a local user or no user to a domain user leading to further compromise.

"SmartAttack" reveals a new threat: smartwatches can act as covert ultrasonic receivers, exfiltrating data from air-gapped systems via sound waves.

Microsoft has definitively abandoned phone-based activation for Windows and Office. Although the company still references this method in

Learn about Pluggable Authentication Module in Linux, and how to use the PAM Skeleton Key to escalate privileges, move laterally, and achieve persistence.