In this article, we are going to describe the utility of Certutil tool and how vital it is in Windows Penetration Testing. TL; DR Certutil

Pivoting Frontend for Pre-Seeded Password Databases - audibleblink/passdb-frontend

Binary to shellcode from an object/executable format 32 & 64-bit PE , ELF - GitHub - vulnwarex/bin2sc: Binary to shellcode from an object/executable format 32 & 64-bit PE , ELF

00:55 - Start of recon
02:30 - Running GoBuster to discover the /monitoring directory
03:50 - Running hydra to try to brute force the HTTP Authentication (Does not work due to it being a secure password)
05:20 - Bypassing the AUTH Request by changing to a…

CVE-2019-0708 (BlueKeep). Contribute to worawit/CVE-2019-0708 development by creating an account on GitHub.

Home of Nikhil SamratAshok Mittal. Posts about Red Teaming, Offensive PowerShell, Active Directory and Pen Testing.

Explains how to hide process & prevent users from seeing processes that do not belong to them on a Linux when using ps/top & other commands

Being the two time Cyber Security Challenge Germany winner I get a lot of questions. Here I'm talking about what frustrates me and how to do it better.

FYI: Before posting this video, I have sent it to the redditor and asked if it's okay to share. The person…

PyMultitor works with EventLoop (Gevent) and multiple Tor processing (Sub Processes). Each Tor process is responsible for the connection between a single IP address (Proxy) and the target. Furthermore, each Tor process has two addresses – an internet address…

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection - niklashigi/apk-mitm

This is a write up of an open source CTF practice challenge.

sample driver for hooking srv!SrvTransactionNotImplemented in srv!SrvTransaction2DispatchTable (DoublePulsar PoC) (x64) - realoriginal/doublepulsar-poc

This is a filter bypass exploit that results in arbitrary file upload and remote code execution in class.upload.php <= 2.0.4 - GitHub - jra89/CVE-2019-19634: This is a filter bypass exploit ...

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS - eladshamir/Internal-Monologue