Research notes

Intro MITM attacks are widely used by penetration testers, as they have a significant impact in allowing them to intercept credentials from…

WiFi network client isolation is a security feature that prevents devices connected to the same network communicating directly with each other. This…

Encrypted DNS (Domain Name System) refers to modern protocols that secure DNS queries by encrypting them between a user’s device and the DNS…

Responder: The Ultimate Tool for Samba Server Hijack and NetNTLM Hash Theft In the vast arsenal of cybersecurity tools, Responder stands out…

This blog post will walk you through the steps of remotely capturing traffic from a domain controller and then analyzing it locally.…

In previous report on Cobalt Strike focused on the most frequently used capabilities that observed. In this report, we will focus on the…

Before starting the analysis, I’m going to use the following environment and tools: Furthermore, it’s always recommended to install Oletools # python…

Learning Objectives Understand the advantages and goals of PCAP Analysis How to pivot into and away from PCAP Analysis (how to use…

Kerberos Fundamentals Kerberos is a network authentication protocol that works on the principle of issuing tickets to nodes to allow access to…

A good detection technique to spot Remote Desktop Connections that are exposed to the internet is to scan RDP event logs for…