Research notes

Intro MITM attacks are widely used by penetration testers, as they have a significant impact in allowing them to intercept credentials from…

IPv6 often remains active in corporate networks. In this article, I will discuss attacks on IPv6 and detection methods. Intro IPv6 is…

WiFi network client isolation is a security feature that prevents devices connected to the same network communicating directly with each other. This…

Developed by computer security and privacy experts at the National Institute of Standards and Technology (NIST), NIST Special Publication (SP) 800-53, Security and…

When you hear “tokens” in the world of Entra ID, what does it mean? There are different types of tokens with different…

Responder: The Ultimate Tool for Samba Server Hijack and NetNTLM Hash Theft In the vast arsenal of cybersecurity tools, Responder stands out…

Introduction When I talk about EDRs in this article, I mean a combination of endpoint protection (EPP) and endpoint detection and response…

Just a walkthrough of how to escalate privileges locally by forcing the system you landed initial access on to reflectively authenticate over…

In previous report on Cobalt Strike focused on the most frequently used capabilities that observed. In this report, we will focus on the…

This post discuss some Digital Forensics and Incident Response (DFIR) techniques you can leverage when you encounter an environment without Windows event…