/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.securitynik.com
Learning by practicing: Beginning Powershell Empire - The Attack in 10 steps
| | diverto.github.io
Abusing MS Windows printing for C2 communication - Diverto - Information Security Warriors
4.5 parsecs away

Travel
| | Printing systems are an often overlooked target for attackers looking to establish command and control (C2) channels on a victim's network. An attacker can abuse the operating system's printing system to add and remove printers and create and manipulate printing jobs to achieve full C2 communication. We have developed a complete proof of concept of such a solution that we have successfully tested in real-world red teaming exercises. By understanding the approach taken in this specific abuse of printing systems, we can take steps to secure them and prevent them from being exploited by malicious actors.
| | zer1t0.gitlab.io
Attacking Active Directory: 0 to 0.9 | zer1t0
4.2 parsecs away

Travel
| |
| | blog.flanker017.me
Testing Empire as post-exploitation framework in domain environment | Flanker Sky
1.2 parsecs away

Travel
| | Testing Empire as post-exploitation framework in domain environment Due to recent research on Red-Blue Team Operations, I became interested in various post-exploitation framework. Since the widely ...
| | blog.fox-it.com
Approximately 2000 Citrix NetScalers backdoored in mass-exploitation campaign - Fox-IT International blog
12.8 parsecs away

Travel
| Fox-IT (part of NCC Group) has uncovered a large-scale exploitation campaign of Citrix NetScalers in a joint effort with the Dutch Institute of Vulnerability Disclosure (DIVD). An adversary appears to have exploited CVE-2023-3519 in an automated fashion, placing webshells on vulnerable NetScalers to gain persistent access. The adversary can execute arbitrary commands with this webshell,...