78 Commits

Author	SHA1	Message	Date
Swissky	4b10c5e302	AD mitigations	2019-12-26 12:09:23 +01:00
Swissky	cf5a4b6e97	XSLT injection draft	2019-12-17 21:13:59 +01:00
Swissky	c60f264664	RDP backdoor + RDP session takeover	2019-11-26 23:39:14 +01:00
Swissky	06864b0ff8	Password spraying rewrite + Summary fix	2019-11-25 23:35:20 +01:00
Swissky	3abaa3e23d	Linux AD - Keyring, Keytab, CCACHE	2019-11-25 23:12:06 +01:00
Swissky	00684a10cd	IIS asp shell with .asa, .cer, .xamlx	2019-11-16 14:53:42 +01:00
Swissky	639dc9faec	.url file in writeable share	2019-11-14 23:54:57 +01:00
Swissky	3a384c34aa	Password spray + AD summary re-org	2019-11-14 23:37:51 +01:00
Swissky	7f266bfda8	mitm ipv6 + macOS kerberoasting	2019-11-14 23:26:13 +01:00
Swissky	f6d5221a85	SID history break trust + Powershell history + SCF files	2019-11-07 23:21:00 +01:00
Swissky	24516ca7a1	Kubernetes attacks update + ref to securityboulevard	2019-11-05 11:05:59 +01:00
Swissky	60050219b7	Impersonating Office 365 Users on Azure AD Connect	2019-11-04 21:43:44 +01:00
Swissky	727eb5cabd	Drop the MIC	2019-10-21 23:00:27 +02:00
Swissky	11fc6e4bc5	NTLM relay + MS08-068	2019-10-20 22:09:36 +02:00
Swissky	ed252df92e	krb5.keytab + credential use summary	2019-10-20 13:25:06 +02:00
Swissky	7159a3ded3	RODC dcsync note + Dumping AD Domain summary	2019-10-18 00:07:09 +02:00
OOP	f0af3b4f4d	Update Active Directory Attack.md	2019-10-15 23:18:07 +07:00
Swissky	5455c30ec7	Juicy Potato + XXE update	2019-09-08 19:44:51 +02:00
Swissky	8dffb59ac5	Pspy + Silver Ticket + MSSQL connect	2019-08-18 22:24:48 +02:00
Swissky	4a176615fe	CORS Misconfiguration	2019-08-18 12:08:51 +02:00
Swissky	b6697d8595	SSRF SVG + Windows Token getsystem	2019-08-15 18:21:06 +02:00
Swissky	bd449e9cea	XSS PostMessage	2019-08-03 23:22:14 +02:00
Swissky	6baa446144	Directory Traversal CVE 2018 Spring	2019-07-27 13:02:16 +02:00
Swissky	657823a353	PTH Mitigation + Linux Smart Enumeration	2019-07-26 14:24:58 +02:00
Swissky	f6c0f226af	PXE boot attack	2019-07-25 14:08:32 +02:00
Swissky	859695e2be	Update PrivExchange based on chryzsh blog post	2019-07-24 14:10:58 +02:00
Swissky	a14b3af934	Active Directory - Resource Based Constrained Delegation	2019-07-22 21:45:50 +02:00
Swissky	45af613fd9	Active Directory - Unconstrained delegation	2019-07-17 23:17:35 +02:00
Swissky	13ba72f124	GraphQL + RDP Bruteforce + PostgreSQL RCE	2019-07-01 23:29:29 +02:00
Swissky	144b3827ab	MS14-068 + /etc/security/opasswd	2019-06-29 17:55:13 +02:00
Swissky	9be62677b6	Add root user + PHP null byte version	2019-06-24 00:21:39 +02:00
Swissky	9745e67465	HQL Injection + references update	2019-06-16 23:45:52 +02:00
Swissky	f88da43e1c	SQL informationschema.processlist + UPNP warning + getcap -ep	2019-05-25 18:19:08 +02:00
Swissky	9c2e63818f	XSS without parenthesis, semi-colon + Lontara	2019-05-15 21:55:17 +02:00
Swissky	b81df17589	RFI - Windows SMB allow_url_include = "Off"	2019-05-12 22:23:55 +02:00
Swissky	bab04f8587	Masscan + AD password in description + ZSH revshell bugfix + Mimikatz lsass.dmp	2019-05-12 21:34:09 +02:00
Swissky	765c615efe	XSS injection Summary + MSF web delivery	2019-05-12 14:22:48 +02:00
Swissky	9dfd7835ea	mitm6 + ntlmrelayx	2019-04-21 14:08:18 +02:00
Alex Zeecka	4b79b865c9	--dc-ip to -dc-ip for psexec cmd	2019-04-03 10:45:45 +02:00
Swissky	90b182f10f	AD references - Blog Post + SSTI basic config item	2019-03-24 16:26:00 +01:00
Swissky	a509909561	PostgreSQL RCE CVE-2019–9193 + ADAPE + WinPrivEsc Resources	2019-03-24 16:00:27 +01:00
Swissky	5d1b8bca79	SAML exploitation + ASREP roasting + Kerbrute	2019-03-24 13:16:23 +01:00
Swissky	e5090f2797	Bazaar - version control system	2019-03-15 23:27:14 +01:00
Swissky	404afd1d71	Fix name's capitalization	2019-03-07 00:07:55 +01:00
Swissky	21d1fe7eee	Fix name - Part 1	2019-03-07 00:07:14 +01:00
Swissky	a58a8113d1	Linux capabilities - setuid + read / Docker group privesc	2019-02-26 17:24:10 +01:00
Swissky	78c882fb34	Jenkins Grrovy + MSSQL UNC + PostgreSQL list files	2019-02-17 20:02:16 +01:00
Swissky	f2273f5cce	PrivExchange attack	2019-02-10 19:51:54 +01:00
Swissky	1c37517bf3	.git/index file parsing + fix CSRF payload typo	2019-02-07 23:33:47 +01:00
Swissky	b9f2fe367c	Bugfix - Errors in stashed changes	2019-01-28 20:27:45 +01:00