Hi all, hope you are keeping well and staying safe. This blog is about my recent Account Takeover finding.

Espionage tool is the most advanced piece of malware Symantec researchers have seen from China-linked actors.

All MITM attacks in one place. Contribute to frostbits-security/MITM-cheatsheet development by creating an account on GitHub.

A fast enumeration tool for Windows Active Directory Pentesting written in Go - m0n1x90/ADReaper

Table fo contents




Disclaimer: This post will cover basic steps to accomplish a privilege escalation based on a vulnerable driver. The basis for this introduction will be a challenge from the hxp2020 CTF  called "kernel-rop". There's (obviously) write…

A detailed analysis of a critical security vulnerability in Google Cloud Platform's Web Application Firewall (WAF) that allows bypassing protection through an 8KB payload technique. Learn about the technical details, implications, and mitigation strategies.

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the P...

As we come to the end of the first quarter of 2022, we want to take some time to look back over our cases from 2021, in aggregate, and look at some of the top tactics, techniques and procedures (TT…

AutoWarp is a critical vulnerability in Microsoft Azure Automation Service that allows unauthorized access to other customer accounts using the service.

Creating and maintaining a secure environment is hard. And with every technology or product added to your environment it gets more complicated. Microsoft Azure as a cloud environment is no exception to this rule and with the many services and features that…

A list of useful Powershell noscripts with 100% AV bypass (At the time of publication). - GitHub - tihanyin/PSSW100AVB: A list of useful Powershell noscripts with 100% AV bypass (At the time of public...

Creating and maintaining a secure environment is hard. And with every technology or product added to your environment it gets more complicated. Microsoft Azure as a cloud environment is no exception to this rule and with the many services and features that…

All MITM attacks in one place. Contribute to frostbits-security/MITM-cheatsheet development by creating an account on GitHub.

Resources for Kubernetes network policies. Contribute to networkpolicy/community development by creating an account on GitHub.