Mahyar Notes
DFIR & Incident Response
How to use Responder to capture NetNTLM and grab a shell
Responder: The Ultimate Tool for Samba Server Hijack and NetNTLM Hash Theft In the vast arsenal of cybersecurity tools, Responder stands out…
READ ARTICLE ↗// Archive
Research notes
Governance, Risk & Compliance
NTLMRelay2Self over HTTP (Webdav)
Just a walkthrough of how to escalate privileges locally by forcing the system you landed initial access on to reflectively authenticate over…
READ ARTICLE ↗
DFIR & Incident Response
Check if your Active Directory passwords are compromised in a data breach
To compare Active Directory accounts against breached passwords you need access to your Active Directory with a specific privileged account, a password…
READ ARTICLE ↗