I am releasing a paper that describes a new variation of a man-in-the-middle (MITM) technique which, under certain circumstances, allows to permanently hijack browsers encrypted HTTP communication channel flow and compromise its confidentiality and integrity.

When I

Posted in r/pentest by u/cook_log • 0 points and 21 comments

0 votes and 2 comments so far on Reddit

Posted by Jeff Vander Stoep, Android Security & Privacy Team and Chong Zhang, Android Media Team [Cross-posted from the Android Develo...

INFILTRATE 2020 will be held April 23/24, Miami Beach, Florida, infiltratecon.com

0 votes and 0 comments so far on Reddit

Exploiting 10,000+ Devices Used by Britain’s Most Vulnerable In this post, we’re going to detail some of the issues our team identified with the an extremely common Alarm & GPS device used by vulnerable people around the world (at least 10,000+ in the UK).…

We’ve packed it, we’ve wrapped it, we’ve injected it and powershell’d it, and now we've settled on feeding it a memory dump, and still Mimikatz remains the tool of choice when extracting credentials from lsass on Windows systems. Of course this is due to…

0 votes and 0 comments so far on Reddit

My GitHub: https://github.com/itsKindred My Twitter: https://twitter.com/kindredsec My Discord for any questions: https://discord.gg/CCZCJCu In this video, I...

Generate fake combolists.

Quick Summary Hey guys today Lightweight retired and here’s my write-up about it. Lightweight was a simple and a straightforward machine, I had fun solving it and I liked it. The idea behind the box is simple, We get initial ssh access then keep escalating…

Jump Ahead: Enum – User – Root – Resources – Special Thanks TL;DR Overall, I really enjoyed this box. Prior to doing this box, I had never really dealt with LDAP, nor did I …

Group Policy Preferences (GPP) has been around for a considerable amount of time, yet I still keep finding remmants of GPP passwords lying around within an Active Directory (AD) forests. For more background on GPP passwords you can read up on it here on Active…

Learn Basic Concepts of Linux. Best site to learn Linux from beginner to Advanced.

Few months ago, I bought a Samsung phone in order to analyse it. After few hours I found an unprotected receiver in the ContainerAgent…

A tool for parsing breached passwords. Contribute to hmaverickadams/breach-parse development by creating an account on GitHub.