Don’t Get Tricked: How to Spot Phishing Before You Take the Bait
October means Fall, arguably the best season of the year, because it means cooler weather, scary movies, Halloween, and more than a few tricks and treats. October also happens to be Cybersecurity Awareness Month, so what better time to talk about one of the oldest tricks on the internet? Working in ...
Continue Reading
Building a Dedicated Web App & API Pentesting Lab
Over the last several months, I have spent quite a few evenings after getting the kids to bed; ...
Continue Reading
Paths to Power in Active Directory Part 6: ESC8 - The Coerced Crown
In Part 5, ESC6 - Under a False Sigil, the focus shifted to identity interpretation. The attack ...
Continue Reading
Paths to Power in Active Directory Part 5: ESC6 - Under a False Sigil
In Part 3, ESC2: The Seal of Any Purpose, we shifted from identity to capability. Instead of ...
Continue Reading
Paths to Power in Active Directory Part 4: ESC3 – In The Name of The Crown
In Part 2, ESC1: No One, Yet Everyone, we examined a misconfiguration that allows a low-privileged ...
Continue Reading
Paths to Power in Active Directory Part 3: ESC2 – The Seal of Any Purpose
" Power in Active Directory, much like power in Westeros, often changes hands not through force, ...
Continue Reading
Paths to Power in Active Directory Part 2: ESC1 – No One, Yet Anyone
This is the second post in this series. Part 1 can be found here.
Continue Reading
Paths to Power in Active Directory Part 1: How AD CS Misconfigurations Become the Keys to the Kingdom
An Introduction to Active Directory Certificate Services (AD CS) I am still pretty new to ...
Continue Reading