PowerShell-Suite - My musings with PowerShell

Coalfire Labs blog posts with opinions, findings and research from the technical testing of IT perspective.

0 points and 0 comments so far on reddit

This guide attempts to outline extension security anti-patterns, as well as provide a usable service (tarnish) to aide developers and security researchers in

A couple of weeks back, I got the opportunity of pentesting an IoT device. To give a brief background, it was a Pi running Apache which served static content. Recently, there has been a lot of focus on IoT security, especially after the havoc created by malware…

1 votes and 1 so far on reddit

June’s “Patch Tuesday” (June 12) is here, but it is likely many Windows 10 users have not yet applied these updates. If you have not, just be sure not to leave your laptop lying around!

1 points and 0 comments so far on reddit

Bishop Fox's Jake Miller explains server-side spreadsheet injection, an attack vector based on CSV injection, in this technical write-up based off his Empire Hacking Meetup presentation.

Today, we are proud to announce a new website we're calling the Internet Intelligence Map. This free site will help to democratize ...

pollyjs - Record, Replay, and Stub HTTP Interactions.

0x01 – Preamble
In Windows operating systems, it is well known that assigning certain privileges to user accounts without administration permissions can result in local privilege escalation attacks. Although Microsoft's documentation is quite clear about…

This post will show you the steps necessary to embed an Empire payload within a trusted PKG installer, using Apple’s own Developer Tools…

Coincidentally, following the recent hack of a US Navy contractor and theft of highly sensitive data on submarine warfare, we have found evidence of very recent activity by a group referred to as APT15, known for committing cyber espionage which is believed…

The best way to protect your Django App from XSS attacks ...

In part 2, I talked about how to deploy and maintain Sysmon and its configuration.

Bishop Fox's Jake Miller explains server-side spreadsheet injection, an attack vector based on CSV injection, in this technical write-up based off his Empire Hacking Meetup presentation.