The following blog post introduces a new lateral movement technique that combines the power of DCOM and HTA. The research on this t...

Details and public exploit code have been published online for a severe vulnerability affecting Hewlett Packard Integrated Lights-Out 4 (HP iLO 4) servers.

PowerShell Runspace Post Exploitation Toolkit. Contribute to Cn33liz/p0wnedShell development by creating an account on GitHub.

In May 2018, when ESET published a blog post covering PDFs with 2 zero days, our interest was immediately piqued. Promptly after our analysis of these PDFs, we send out an early warning to our cust…

DISCLAIMER: This post is for educational purposes only. Cybercrime is stupid and will probably have you wasting your talents in prison.

Python script to scan Git repos for interesting strings - dionach/reposcanner

I can read your passwd file with: “/???/??t /???/??ss??”. Having fun with Sucuri WAF, ModSecurity, Paranoia Level and more…

The post doesn't explain the enumeration part for finding related domains, but rather finding domain-specific data such as owner, reputation, or DNS settings.

A crucial element for the Red Team’s task is having stealth to perform the attack, success in the ability to expose an aggressive mindset…

A USB is a great option for people from every phase of life but do you know your USB drive can become your worst nightmare?

Google has admitted that "sometimes" emails sent and received by Gmail users can be accessed by third-party app developers.

Explore this post and more from the homelab community

Extract stored credentials from Internet Explorer and Edge - HanseSecure/credgrap_ie_edge