R3d Buck3T

Weaponizing InterPlanetary File System and Azure Sites

Unlock the power of the AWS API gateway with Fireprox configuration

Testing APIs with Certificate-based authentication

A Guide to Deploying Red Team Infrastructure on Azure

Exploiting Resource-Based Constrained Delegation for Unauthorized Access [Updated]

C2 Deployment and Operations — Infrastructure

Identifying CORS Vulnerabilities: Common Attack Vectors and Mitigation Strategies

Last month, I enrolled in Pentester Academy Active Directory Bootcamp -Beginner’s Edition by Nikhil Mittal. The course covers Active…

Analyzing VBA Macros in Microsoft’s OLE2 files

Tools and Techniques for efficient virtual host discovery

Linux Privilege Escalation Technique

Advanced WinRM Security: Achieving Passwordless Authentication with Certificate-Based Methods

Basic Server-Side Request Forgery on Selenium Grid Framework

Configure Active Directory Domain Services and Automate Domain Users Creation with PowerShell

Why should we care !! How to leveraging this flaw in social engineering attacks?

Lateral Movement Attack in Active Directory Environment, MITRE ATT&CK — ID: T1550.00

Linux Logrotate Exploitation - affected versions 3.8.6, 3.11.0, 3.15.0.

Dumping user hashes for Kerberos disabled pre-authentication accounts

Injection Attacks, SQL Truncation, OWASP Top 10

Data Exfiltration in OpenEMR 2018 v5.0.1

SSH Port Forwarding, Network Pentesting, Pivoting

domain escalation from a low-privileged user to a domain admin

Strategically Mapping Targets inside the Internal Network

Trust this user/computer for delegation to specified services only

A simple explanation of the difference between Single Sign-On and Federated Authentication

Network File Shares, Network Exploitation, Metasploitable

Exploit Analysis of OpenNetAdmin v18.1.1

Guide to Privilege Escalation through Insecure Windows Service Permissions.

Abuse Active Directory domain trusts for privilege escalation to Enterprise Admin

Obtain NTLM hashes in Windows Domain Controller machines