RTOps: Automating Redirector Deployment With Ansible
Agenda Reading Time: 20mins This blog will cover what redirectors are, why they are important for red teams, and how to automate their deployment with Ansible. »
SecSmash: Leveraging Enterprise Tools for command execution, lateral movement and C2
Release### We are releasing the SecSmash tool we announced at BSIDES LV. SecSmash is a framework that allows you to turn centralized management, monitoring, and security »
Eternal Blues
As pentesters, our job is to demonstrate the risk of unpatched vulnerabilities to the business. The past month, this has largely been an exercise in demonstrating »
Cracking NTLMv1 Handshakes with Crack.sh
What This post will show how to crack NTLMv1 handshakes with the crack.sh service to obtain the NTLM hash. This technique has been publicized since »
Gaining Code Execution with Injection on Java args
Recently on a pentest, we encountered a web application that allowed us to control command line args sent to the 'java' binary on the »