Describing all the techniques for attacking MS Exchange in Q2 2020 and introducing a new one: the LDAP via Exchange attack

Purple Teaming Attack & Hunt Lab - Terraform. Contribute to DefensiveOrigins/APT-Lab-Terraform development by creating an account on GitHub.

Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise - SixGenInc/Noctilucent

Contribute to SafeBreach-Labs/Spooler development by creating an account on GitHub.

In May 2020, Microsoft patched CVE-2020-1048 , a critical privilege escalation bug in Windows. Through this vulnerability, an attacker with the ability to execute low-privileged code on a Windows machine can easily establish a persistent backdoor, allowing…

This is a detailed overview of the bugs found while reviewing the source code of WordPress plugins. I cover 3 reported vulnerabilities…

Contribute to S3cur3Th1sSh1t/PowerSharpPack development by creating an account on GitHub.

Introduction During red team engagements, it is not uncommon to encounter Endpoint Defence & Response (EDR) / Prevention (EDP) products that implement user-land hooks to gain insight in to a...

I’ve been looking into Azure attack primitives over the past couple of months to gain a better understanding of how the system works, what…

There was a weird bug in the DotNet Core Toolset installer that allowed any local user to elevate their privileges to SYSTEM. In this blog post, I want to share the details of this bug that was silently (but only partially) fixed despite not being acknowledged…

Windows access token manipulation attacks are well known and abused from an offensive perspective, but rely on an extensive body of arcane Windows security internals. In this blog post, we demystify h...

This short Wireshark tutorial explains decrypting HTTPS traffic, including when you can accomplish it and how to do it.

Hook system calls on Windows by using Kaspersky's hypervisor - iPower/KasperskyHook

An article about an Arbitrary File Read vulnerability (CVE-2019-19499) in Grafana

Loading and managing shared libraries in memory.