How a Simple IDOR Led Me to Delete Any Account
Introduction How did an IDOR (Insecure Direct Object Reference) Vulnerability lead me to delete anyone’s account? This is a tale about a particular application that
July 12, 2022
Red Teaming: Easy Phishing Infrastructure Setup (For SOC Analysts & Red Teamers)
Introduction In red teaming assessment, red teamers simulate the real-world attack scenarios in order to achieve their goals. Phishing is one of the attack scenarios
May 30, 2022
A Walkthrough of Kerberosting and Golden Ticket exploit for Red Teamers
Basic of Kerberosting Kerberoasting is one of the most common attacks against domain controllers. It is used to crack a Kerberos (encrypted password) hash using
March 7, 2022
AD Enumeration Without External Scripts
AD Enumeration Without External Scripts While doing red teaming many a time we encounter implimentation of internal VDI with no internet excess to external network
February 9, 2022
Remote Process Enumeration using Windows Terminal Services APIs
Hi All. I welcome you again. In this particular blog post we’ll code our own tool in C++ to gather information (list of running processes)
December 28, 2021
Why Not Knowing the Importance of Cybersecurity Makes You a Rookie in the Business World?
With the last quarter around the corner, most businesses are gearing up to prep for the QBR meeting and setting up new OKRs and budgets
October 1, 2021
AMSI-Bypass
Introduction Hello Folks. As you know AMSI is something that you will most likely come across almost in every Red Team engagements. As of today
August 23, 2021
Privilege Escalation on Windows
Introduction Operating systems are configured with multiple access roles from low privilege to high privilege for restriction of access to a data or resource. But
March 7, 2021
