Recently Updated Pages

Bypassing BotGuard and DBSC, A Technical Study of GWS and GCP Session Hijacking

Abstract This article documents a comprehensive red-team lab designed to evaluate session hijacki...

From Boot Key to Plaintext: How Windows LSA Secrets Are Deciphered from the Registry

Introduction and recall Windows stores some of its secrets, service account passwords, machine ac...

NFS

This cheatsheet is built from numerous papers, GitHub repos and GitBook, blogs, HTB boxes and lab...

System Center Configuration Manager

This cheatsheet is built from numerous papers, GitHub repos and GitBook, blogs, HTB boxes and lab...

Active Directory - Python edition

This cheatsheet is built from numerous papers, GitHub repos and GitBook, blogs, HTB boxes and lab...

Active Directory

This cheatsheet is built from numerous papers, GitHub repos and GitBook, blogs, HTB boxes and lab...

[EN] Zipper (Hard)

What you will learn: API to RCE Funky shell magic to get a stable environment Abusing SUID binar...

Bug Bounty - Content Discovery / Recon

Obtain subdomains and links from the target host: for h in $(cat hosts.txt); do curl -siL https:/...

[FR] Système des capabilities Linux

Introduction et principes généraux des Capabilities Lorsque l’on veut lancer un processus avec ce...

HideAndSec

Nous sommes un groupe de passionnés d'informatique, de sécurité web, logiciel, IoT, analyse de bi...

MDT, where are you?

TLDR Search for the intellimirrorSCP object class and its netbootServer attribute to find a WDS s...

Active Directory Certificate Services

It is a cheatsheet about the different AD-CS attacks presented by SpecterOps. All the references ...

Pivoting

This cheatsheet is built from numerous papers, GitHub repos and GitBook, blogs, HTB boxes and lab...

[FR] Decentralized Identifiers (DIDs)

Rappels Identity and Access Management (IAM) Il existe actuellement 3 grandes formes de Gestion ...

In the Potato family, I want them all

Back in 2016, an exploit called Hot Potato was revealed and opened a Pandora's box of local privi...

CSP Series

1. Intro CSP (Content Security Policy) is there / in-place to mitigate some attacks, such as xss,...

SSRF Series

1. INTRO SSRF (Server-Side Request Forgery: server-side request forgery) is a fake exploit server...

Spawning TTY Shells

Shell Spawning Python python -c 'import pty; pty.spawn("/bin/sh")' python3 -c 'import pty; pty...

Reverse shells

Listener Before any reverse shell, you need to set up the listener, which will listen to a port a...

Cache Poisoning

What is it ? Cache poisoning was popularized in 2018, although this attack existed long before, a...
Back to top