Explore >> Select a destination


You are here

bohops.com
| | www.hexacorn.com
3.7 parsecs away

Travel
| |
| | www.cybereason.com
2.6 parsecs away

Travel
| | Cybereason GSOC observed distribution of the Bumblebee Loader and post-exploitation activities including privilege escalation, reconnaissance and credential theft. Bumblebee operators use the Cobalt Strike framework throughout the attack and abuse credentials for privilege escalation to access Active Directory, as well as abusing a domain administrator account to move laterally, create local user accounts and exfiltrate data...
| | ogmini.github.io
4.6 parsecs away

Travel
| | Messing around with Windows Defender just to download and execute LaZagne locally leaves artifacts behind related to exclusions. There are of course other more stealthy ways to run LaZagne by using RATs such as Pupy or Meterpreter/Metasploit. This post will list out the Registry Keys and Event Logs related to Windows Defender.
| | blog.0xbadc0de.be
40.7 parsecs away

Travel
| [AI summary] The provided text is a detailed article on best practices for securing SSH (Secure Shell) configurations and usage. It covers various aspects such as using SSH certificates, LDAP integration, avoiding passwordless private keys, and implementing multi-factor authentication (MFA). The text also includes discussions on smart cards, FIDO U2F, and tools for managing SSH keys. There are comments from readers discussing related topics like full disk encryption, key revocation, and tools like `whosthere` for capturing SSH public keys. The article is part of a blog post and includes links to external resources and other blog posts.