Research notes

IPv6 often remains active in corporate networks. In this article, I will discuss attacks on IPv6 and detection methods. Intro IPv6 is…

When you hear “tokens” in the world of Entra ID, what does it mean? There are different types of tokens with different…

Responder: The Ultimate Tool for Samba Server Hijack and NetNTLM Hash Theft In the vast arsenal of cybersecurity tools, Responder stands out…

This blog post will walk you through the steps of remotely capturing traffic from a domain controller and then analyzing it locally.…

Just a walkthrough of how to escalate privileges locally by forcing the system you landed initial access on to reflectively authenticate over…

Kerberos Fundamentals Kerberos is a network authentication protocol that works on the principle of issuing tickets to nodes to allow access to…

Scan Network cme smb # enumerate smb hosts nmap -sP -p # ping scan nmap -PN -sV –top-ports 50 –open # quick…

To compare Active Directory accounts against breached passwords you need access to your Active Directory with a specific privileged account, a password…

Introduction If you’ve ever tried to run a command prompt as administrator on your Windows OS before, you’ve seen a harmless popup…

A regular domain user can easily take over the entire Active Directory domain. While we still recommend that the print spooler service…