Often times while performing penetration tests it may be helpful to connect to a system via the Remote Desktop Protocol (RDP). I typically use rdesktop or xfreerdp to connect to host once I have obtained credentials to do all sorts of things such as use Active…

This post is about Server Side Template Injection (SSTI) and a brief walkthrough of how it can be leverage to get a shell on the server…

Posted by Jann Horn, Google Project Zero This blogpost describes a way to exploit a Linux kernel bug (CVE-2018-17182) that exists since...

A framework for stealthy domain reconnaissance. Contribute to Tylous/Vibe development by creating an account on GitHub.

A little tool to play with Windows security. Contribute to gentilkiwi/mimikatz development by creating an account on GitHub.

When is the last time you created your SSH key? If you’re still using RSA with key-size less than 2048 bits long, It’s time for an upgrade!

Hi Guys,

3 votes and 0 comments so far on Reddit

The attack added to the company’s woes as it contends with fallout from its role in a Russian disinformation campaign.

The Internet Crime Complaint Center (IC3), in collaboration with DHS and the Federal Bureau of Investigation, has released an alert on cyber threat actors maliciously using legitimate remote administration tools, such as Remote Desktop Protocol (RDP). Threat…

Phrack staff website.

12 votes and 1 comment so far on Reddit

As more payments take place online through apps, David Chaum warns that a rich trove of personal data is ripe for exploitation.

Python will soon be the world’s most prevalent coding language. That’s quite a statement, but if you look at its simplicity, flexibility and the relative ease with which folks pick it up, it’s not hard to see why.