Bloodhound walkthrough. A Tool for Many Tradecrafts
Jun 7, 2019 · Learn how to set up and use BloodHound, a tool that can help you identify attack paths in Active Directory environments. This blog post covers the installation, setup and ingestors of BloodHound on Linux, MacOS and Windows, as well as Docker options.
Cyber Security Consulting & Testing | Pen Test Partners
Oct 24, 2024 · Pen Test Partners is a UK-based company that provides security consulting and testing to various industries and organisations. Follow their Twitter account for updates on their projects, events, research, and opinions on cyber security topics.
How To Do Firmware Analysis. Tools, Tips, and Tricks
May 3, 2019 · Learn how to convert SREC, HEX, TI-TXT and other firmware formats to binary and extract useful data from them. See examples of tools and techniques for firmware analysis, such as strings, binwalk, IDA and Nand-dump-tool.py.
How to root an Android device for analysis and vulnerability …
Aug 23, 2024 · TL;DR Rooting is useful for Android assessments The process is relatively simple It will wipe all user data from the device and void any warranty Introduction For mobile testing, be it for apps or hardware, having complete control over the device is essential for analysis and vulnerability assessment. Rooting an Android device allows us to
MS Enterprise app management service RCE. CVE-2022-35841
A vulnerability in the Enterprise App Management Service allows unprivileged users to execute arbitrary code via DCOM interfaces. Learn how to exploit the vulnerability locally and remotely and how Microsoft fixed it in September 2022.
Insights and highlights from DEF CON 32 | Pen Test Partners
Aug 16, 2024 · TL; DR Event Dates: August 8-11, 2024, in Las Vegas. PTP Presentations: Windows Hello: Our Ceri Coburn (with Outsider Security's Dirk-Jan Mollema) revealed vulnerabilities in biometric authentication. Maritime Security: Paul Brownridge discussed vulnerabilities in maritime systems and regulations. GPS Spoofing: Ken Munro highlighted the …
How to enhance the security of your social media accounts
Aug 30, 2024 · DFIR. You lost your iPhone, but it’s locked. That’s fine, right? 06 Nov 2024
Abusing RDP’s Remote Credential Guard with Rubeus PTT
Oct 22, 2020 · TL;DR Microsoft’s Remote Credential Guard (RCG) for RDP protects creds if an RDP server is compromised. It leaves little scope for password or NTLM credential dumping when a user connects to the server. It does however introduce workstation attack vectors. Abusing a user’s Kerberos token allows Pass-The-Ticket (PTT) attacks and authenticate to RDP servers …
Vulnerabilities that (mostly) aren’t: LUCKY13 - Pen Test Partners
May 3, 2024 · TL;DR LUCKY13 is more an attack than a vulnerability LUCKY13 was patched over a decade ago ... so it’s really unlikely that your server is vulnerable now It's an implementation issue Disabling CBC ciphers is still a good idea ... but not because of susceptibility to LUCKY13 There is no material risk in this issue
How to: Kerberoast like a boss - Pen Test Partners
Nov 5, 2024 · The Reversal. To reverse collected Kerberoasted hashes you can use hashcat, here’s how to do that. The previous section titled ‘Blast in the past’ resulted in the collection of a service account with the username of ‘DA1’.