opexxx

One of the growing attacks we have seen has been Remote Desktop brute forcing, MITRE ATT&CK technique T1076(link https://attack.mitre.org/wiki/Technique/T1076 ), especially if you have laptops that connect directly to the internet when not at your office. We know what you are thinking…peopl

A comprehensive list of Docker security tools that can help you implement Docker security best practices.

Hello again, this is Shusei Tomonaga from the Analysis Center. In Windows OS, various commands (hereafter “Windows commands”) are installed by default. However, what is actually used by general users is just a small part of it. On th

brew cask install buttercup

Gwendal Le Coguic, web developer and security researcher

In this blog post I will discuss the steps to use PowerShell, Invoke-CradleCrafter and Microsoft’s Certutil.exe to craft a payload and one-liner that can be used to evade the latest version of Windows Defender (as of this writing)

Beau Bullock // I’ve added in a few modules to MailSniper that will assist in remote attacks against organizations that are hosting an externally facing Exchange server (OWA or EWS). Specifically, the modules are Get-GlobalAddressList, Invoke-PasswordSprayOWA, and Invoke-PasswordSprayEWS. Get-GlobalAddressList Very often on external penetration tests we perform a reconnaissance phase that might yield us some email …

Hi guys, Now that we have our data from the passive information gathering, we can use it and perform an active information gathering. I obviously did not use the data I collected in the examples below as it would be unethical and without authorization. Next post I will talk about Port Scanning (Nmap). Active