Research notes

Intro MITM attacks are widely used by penetration testers, as they have a significant impact in allowing them to intercept credentials from…

Introduction Open-source software (OSS) licenses define how code can be used, modified, redistributed, or integrated into other software systems. While many licenses…

Wireshark RDP resources Looking for a way to capture and inspect RDP traffic in Wireshark? You’ve come to the right place! SSLKEYLOGFILE…

Learning Objectives Understand the advantages and goals of PCAP Analysis How to pivot into and away from PCAP Analysis (how to use…

Generic Windows Artifacts Windows 10 Notifications In the path \Users\<username>\AppData\Local\Microsoft\Windows\Notifications you can find the database appdb.dat (before Windows anniversary) or wpndatabase.db (after…

Scan Network cme smb # enumerate smb hosts nmap -sP -p # ping scan nmap -PN -sV –top-ports 50 –open # quick…

Intro In our research, we expose adversarial Tactics, Techniques and Procedures (TTPs) as well as the tools they use to execute their…