Infosec Blog

SpecterOps Red Team Operator Course (AT:RTO) - Review

The information security community concurs that if you'd like to know anything, you are likely a "google" away. From Adversary tactics to detections to courses, infosec professionals do an excellent job of documenting and sharing their experiences and knowledge. I've benefited from many course reviews and I'd like to return

kerberos

ASREPRoasting - (Forest HTB)

Kerberos has been a hot topic in the security community ever since Tim Medins' talk on Attacking Kerberos. This blog post is tailored to discuss a small subset of abusing Kerberos, ASPREP Roasting. This is possible when users that have the property 'Do not require Kerberos preauthentication' is set (UF_

python

Dangers of eval() - (Craft HTB)

Python has a built-in eval() function. The eval() function is used to evaluate the specified expression. If the expression is a correct Python statement, it will be executed. This can be very dangerous if used incorrectly by a web developer. Image from https://docs.python.org/3/library/functions.html#

AD

Windows Permissions, Rights, Privileges, MIC level, etc...

This post is focused on refining some of my understanding of the Windows OS and the data structures/rules that determine who can do "what". I'll also attempt to tie each to topic to a security implications with examples and research public to the security community. Every action on a

psexec

Heist - HTB

Retrieved from https://www.hackthebox.eu/home/machines/profile/2011) Enumeration will show you running web server. Additionally, it's important to note SMB and WinRM are also running . We will leverage these once we get a hold of some credentials. 2) Web server has a login page -> I

covenant

Domain Fronting with Microsoft Azure and Covenant

INTRO EDIT: (Outdated/No longer allowed #oldnews). Microsoft is cracking down and suspending accounts. Use this as a "historical" reference :) #vintage At a high level, domain fronting can be used to transmit command and control traffic to the intended origin that’s being blocked by egress filters. It is also

@__ar0d__

@ar0d