Warren ButterworthFinding Initial Access on a real life Penetration TestOn a recent internal Penetration Test I was faced with the above scenario and had to work a little harder for Domain Admin. So finding…Mar 23, 2023Mar 23, 2023
Warren ButterworthBloodhound: A Pentester’s best friendAnyone in the Infosec community has heard of bloodhound. Its a tool used to enumerate Active Directory and is my go to on an Internal…Jun 22, 2022Jun 22, 2022
Warren ButterworthXXE to SSRF to Windows Administrator HashesOn a recent Pen test I was tasked with testing a bespoke Windows application that connected to a REST API. The Application was used by…Aug 27, 2020Aug 27, 2020