Application & Software Security2026.01.16How MITM attacks work in Ethernet, IPv4 & IPv6Intro MITM attacks are widely used by penetration testers, as they have a significant impact in allowing them to intercept credentials from…READ ARTICLE ↗
Cloud & DevSecOps2024.11.22What is NIST SP 800-53?Developed by computer security and privacy experts at the National Institute of Standards and Technology (NIST), NIST Special Publication (SP) 800-53, Security and…READ ARTICLE ↗
DFIR & Incident Response2024.01.01Remotely Capture Traffic from a Domain Controller and Analyze It LocallyThis blog post will walk you through the steps of remotely capturing traffic from a domain controller and then analyzing it locally.…READ ARTICLE ↗
Governance, Risk & Compliance2022.09.29NTLMRelay2Self over HTTP (Webdav)Just a walkthrough of how to escalate privileges locally by forcing the system you landed initial access on to reflectively authenticate over…READ ARTICLE ↗
Governance, Risk & Compliance2021.08.11Utilizing a Common Windows Binary to Escalate to System PrivilegesIntroduction If you’ve ever tried to run a command prompt as administrator on your Windows OS before, you’ve seen a harmless popup…READ ARTICLE ↗
Governance, Risk & Compliance2021.06.04Dumping RDP CredentialsAdministrators typically use Remote Desktop Protocol (RDP) in order to manage Windows environments remotely. It is also typical RDP to be enabled…READ ARTICLE ↗
Governance, Risk & Compliance2020.10.30Powershell is POWERED SHELL for Sysadmins and Penetration testersThis article contains a list of PowerShell commands collected from various corners of the Internet which could be helpful during penetration tests…READ ARTICLE ↗
</>Governance, Risk & Compliance2013.11.23طرز تهیه Image از ویندوز 7 با فرمت WIM با استفاده از ابزار Dism یا Imagexمایکروسافت در سیستمهای عامل ویندوز Vista,2008,7 امکان تهیه Image را با استفاده از ابزارImagex موجود در Windows Automated Installation Kit در اختیار…READ ARTICLE ↗
DFIR & Incident Response2013.06.07مدل تیم رسیدگی به رخدادهای رایانه ایدر استاندارد NIST SP800-61 سه مدل تیم رسیدگی به رخداد های رایانه ای معرفی شده است. یک مجموعه می تواند براساس گستره فعالیت…READ ARTICLE ↗
</>DFIR & Incident Response2013.06.07رسیدگی به رخدادهای رایانه ایاستاندارد NIST SP800-61 چیست؟ این استاندارد مدل و ساختار یک تیم مدیریت و رسیدگی به رخداد های رایانه ای (Computer Security Incident…READ ARTICLE ↗