Research notes

IPv6 often remains active in corporate networks. In this article, I will discuss attacks on IPv6 and detection methods. Intro IPv6 is…

Introduction When I talk about EDRs in this article, I mean a combination of endpoint protection (EPP) and endpoint detection and response…

Just a walkthrough of how to escalate privileges locally by forcing the system you landed initial access on to reflectively authenticate over…

In previous report on Cobalt Strike focused on the most frequently used capabilities that observed. In this report, we will focus on the…

Before starting the analysis, I’m going to use the following environment and tools: Furthermore, it’s always recommended to install Oletools # python…

Introduction If you’ve ever tried to run a command prompt as administrator on your Windows OS before, you’ve seen a harmless popup…

Intro In our research, we expose adversarial Tactics, Techniques and Procedures (TTPs) as well as the tools they use to execute their…

Abstract We want to run a simple C2 that is not exposed to the internet, with multiple socats redirecting our payload delivery…

we’ll talk about post exploitation hacking techniques you can use after having a meterpreter shell on a remote system. You’ll see things…

This module is a port of the Equation Group ETERNALBLUE exploit, part of the FuzzBunch toolkit released by Shadow Brokers. There is…