Free Events Based on the Free Training Categories - DFIR, OSINT, Malware Analysis, Reverse Engineering, Cloud, Networking, Linux, Programming, General IT & Cybersecurity.

hyper-v internals

In this paper I'll show you how to compromise websites by using esoteric web features to turn their caches into exploit delivery systems

Unveil the

Today we´re going to talk a little about possible ways to circumvent some of the security measures one might face during an engagement in an Active Directory environment.

We as pentesters are heavily relying on our tools like Bloodhound, Rubeus, mimikatz…

Automatic Device Vulnerability Scanner in PHP with the ExploitDB CSV on GitHub - WokeWorld/Vulnerable

 In this past few days I stumble to some new and old variant of ICEID malware that uses .png steganography to hide and execute its encrypted...

A complete reference about SQL injection. Introduction, tutorial, advanced attack techniques, how to avoid it, resources and much more!

Windows Defender has improved significantly the security posture of Windows environments since it has better detection capabilities compare to other security products. When a process is created Win…

TL;DR Link to heading This blog post describes a generic technique I called internally on our red team assessment “Divide and Conquer”, which can be used to bypass behavioral based NextGen AV detection. It works by splitting malicious actions and API calls…

Obfuscated DNS Queries, Author: Guy Bruneau

HackTools is an add-on that facilitates online penetration testing, includes cheat sheets and all the tools used during a penetration testing, such as XSS payloads, Reverse shells and more. With this extension you no longer need to look for payloads on different…

Co-authored by Ghanashyam Satpathy and Dagmawi Mulugeta Summary Emotet has become one of the world’s most advanced botnets. Like many malware campaigns,