Introduction Heresy's Gate Closing Nebbett's Gate Meltdown KVA Shadow Page Fault Loop NTDLL ...

Abusing a bug in Sysmon's driver to fake source processes' image file names.

During a red team engagement, one of the first things you may want to do after obtaining initial access is establish reliable persistence on the endpoint. Being able to streamline...

A dive into Windows DLLs, DLL hijacking, automation, WinAPI, and finding the root cause of shared DLL hijacks.

Research by: Sagi Tzadik Introduction DNS, which is often described as the “phonebook of the internet”, is a network protocol for translating human-friendly computer hostnames into IP addresses. Because it is such a core component of the internet, there are…

Starting with Windows 8.1 (and Server 2012 R2) Microsoft introduced a feature termed LSA Protection. This feature is based on the ...

A few weeks ago, I was going over some of the research topics in my to-do list, and the one that sounded interesting to work on during 4th…

Enumerate and disable common sources of telemetry used by AV/EDR. - jthuraisamy/TelemetrySourcerer

Describing all the techniques for attacking MS Exchange in Q2 2020 and introducing a new one: the LDAP via Exchange attack

I’ve been looking into Azure attack primitives over the past couple of months to gain a better understanding of how the system works, what…

Introduction During red team engagements, it is not uncommon to encounter Endpoint Defence & Response (EDR) / Prevention (EDP) products that implement user-land hooks to gain insight in to a...

I’ve been looking into Azure attack primitives over the past couple of months to gain a better understanding of how the system works, what…

Test tool for CVE-2020-1472. Contribute to SecuraBV/CVE-2020-1472 development by creating an account on GitHub.

Written by Jon Baker and Forrest Carver.

Use Group Policy to pull down a file from your attack machine to Domain Controllers, leveraging client-side extensions and Admin Tool Extensions to bypass…