2024-06-11 |
Stealthy Persistence with “Directory Synchronization Accounts” Role in Entra ID |
|
|
2023-07-09 |
How to read Windows serialized certificates (with code sample) |
|
|
2023-07-09 |
Pass the SALT 2023 conference |
talk |
|
2023-07-09 |
SharkFest'22 Europe conference |
talk |
|
2023-01-12 |
SMB “Access is denied” caused by anti-NTLM relay protection |
|
|
2023-01-12 |
Don’t make your SOC blind to Active Directory attacks: 5 surprising behaviors of Windows audit policy |
|
|
2022-10-04 |
Decrypt Kerberos/NTLM “encrypted stub data” in Wireshark |
|
|
2022-09-29 |
Decrypt Kerberos/NTLM “encrypted stub data” in Wireshark |
|
|
2021-09-02 |
Active Directory virtualization safeguard deactivation |
|
|
2021-04-13 |
Auto deploy Python Flask web app on GitHub push |
|
|
2021-03-03 |
Risks of Microsoft Teams and Microsoft 365 Groups |
Tool |
|
2020-11-20 |
NTLM relay of ADWS (WCF) connections with Impacket |
Tool |
|
2020-11-20 |
CVE-2020-7315 McAfee Agent DLL injection |
CVE |
|
2020-11-20 |
"Google Drive uploader" Python tool |
Tool |
|
2020-11-20 |
"Twitter likes" Python tool |
Tool |
|
2020-11-20 |
CVE-2019-1172 Disclosure of Azure AD personal account auth token to malicious websites when using the recommended browser extension 1/2 |
CVE |
|
2020-11-20 |
CVE-2019-1172 Disclosure of Azure AD personal account auth token to malicious websites when using the recommended browser extension 2/2 |
CVE |
|
2020-11-20 |
CVE-2020-4311 IBM Tivoli Monitoring weak folder permissions |
CVE |
|
2020-11-20 |
Server-Side Template Injection (SSTI) in ASP.NET Razor |
|
|
2020-11-20 |
Security pitfalls in authenticating users and protecting secrets with biometry on mobile devices (Apple & Android) |
|
|
2020-11-20 |
When Windows Hello fails at securely authenticating users and protecting credentials |
|
|