A Volume Shadow Copy client that excels in dumping creds and getting away with it
SAMDump and exfiltrate
0xVM / OFFENSIVE SECURITY FIELD NOTES
SYSTEMS SECURITY
MAN — MACHINE — ATTACK SURFACE
セキュリティ研究
TRANSMISSIONS / RESEARCH LOG
RECENT FIELD NOTES
5 RECORDS / ORDERED BY LAST SIGNAL
HTTPS intercepting proxy in python
Sometimes you can’t have BURP, or you need something really light. Here’s a full featured SNI capable HTTPS intercepting proxy that will generate a Certificate Authority cert (which you’ll need to trust) and certifica...
Interesting links from the intertubes
redteam-pentesting.de excellent article on reflection
Windows Coercion Methods
Reflective Kerberos Relay Attack
Reflective Kerberos Relay Attack (PDF)
wspcoerce (GitHub)
pretender (GitHub)
NTLM reflection...
Intro to pwnables
Walkthrough of a pwnable using pwntools, pwndbg, AFL
Welcome to my Blog!
Almost 15 years later i’ll resume blogging, many many thanks for stopping by!
INDEX / SUBJECT MATRIX
SIGNAL CLASSES
PROFILE
SECURITY RESEARCH.
Writing and research on vulnerability analysis, exploit development, and offensive security.