PowerShell Remote Download Cradle Generator & Obfuscator - danielbohannon/Invoke-CradleCrafter

Exchange privilege escalations to Active Directory - gdedrouas/Exchange-AD-Privesc

MS17-010. Contribute to worawit/MS17-010 development by creating an account on GitHub.

APT & CyberCriminal Campaign Collection. Contribute to CyberMonitor/APT_CyberCriminal_Campagin_Collections development by creating an account on GitHub.

An exploration of different browser automation methods to inject JavaScript into webpages.

As part of our four-month internship at GoSecure, we chose to work on creating a Remote Desktop Protocol (RDP) honeypot. To achieve this, we used a Linux server with an RDP man-in-the-middle (MITM) program that redirects traffic to a real Windows Server.

In this article, we will learn about how to configure the password-protected Apache Web Server to restrict from online visitors without validation so that we

One of the most frustrating things to me as a security person is having sales and marketing types confuse the different types of security assessment. Similariti

Event Tracing for Windows (ETW) is the mechanism Windows uses to trace and log system events. Attackers often clear event logs to cover…

Learn about various BLE vulnerabilities and the tools and techniques employed for performing attacks on Bluetooth Low Energy devices.

Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data - ANSSI-FR/ORADAD

A high-level mind map to summarize all the techniques/tools covered by Peter Kim’s book.

For many pentesters, Meterpreter's getsystem command has become the default method of gaining SYSTEM account privileges, but have you ever have wondered just how this works behind the scenes? In this post I will show the details of how this technique works…

This is @newp_th.This issue is very similar to my previous report on Reflected XSS on Stack Overflow.