Research notes

Wireshark RDP resources Looking for a way to capture and inspect RDP traffic in Wireshark? You’ve come to the right place! SSLKEYLOGFILE…

Just a walkthrough of how to escalate privileges locally by forcing the system you landed initial access on to reflectively authenticate over…

Remote users can connect to their Windows 10 and 11 computers via the Remote Desktop Services (RDP). It is enough to enable…

A good detection technique to spot Remote Desktop Connections that are exposed to the internet is to scan RDP event logs for…

Generic Windows Artifacts Windows 10 Notifications In the path \Users\<username>\AppData\Local\Microsoft\Windows\Notifications you can find the database appdb.dat (before Windows anniversary) or wpndatabase.db (after…

smss.exe It’s called Session Manager. Session 0 starts csrss.exe and wininit.exe (OS services) while Session 1 starts csrss.exe and winlogon.exe (User session).…

Administrators typically use Remote Desktop Protocol (RDP) in order to manage Windows environments remotely. It is also typical RDP to be enabled…

The content in this section describes what’s new and changed in Windows Server® 2016. The new features and changes listed here are…

در تنظیماتGroup Policy در ویندوز سرور گزینه ای به نامLoopback Processing وجود دارد که بسیار مشاهده می شود مفهوم این مسئله به…

ابتدا با root  لوگین کنیدبرای ورود در ssh عبارت زیر را تایپ کنید su root حالا ازتون رمز روت رو درخواست میکنه…