Blog

A primer on DCSync attack and detection

Hello All, Active directory is a backbone of almost all the organizations. It helps the IT team to manage the systems, users, policies...

Chirag Savla

#OMIGOD - CVE-2021-38647

Hello All, In this blog post, we will explore the Unauthenticated Remote Code Execution vulnerability discovered by the WIZ team in Azure...

Chirag Savla

Fantastic Windows Logon types and Where to Find Credentials in Them

Hello All, In this blog post we will explore and learn about various Windows Logon Types and understand how are these logon type events...

Chirag Savla

Abusing Resource-Based Constrained Delegation (RBCD) using Linux

Hello All, In this post we will discuss on how to perform Resource-Based Constrained Delegation (RBCD) attack from an Linux machine as an...

webmaster03668

Introduction To 365-Stealer - Understanding and Executing the Illicit Consent Grant Attack

365-Stealer is phishing tool written in python3 which abuses App registrations to perform illicit consent grant attack.

webmaster03668

365-Stealer

I have been currently working on Azure and Office365 to explore and learn various techniques to abuse its features. In this blog we will...

Chirag Savla

Introduction to Obfuscator

Hello All, In this post I will provide you an overview about the new tool that I wrote to encrypt the shellcode using XOR & AES...

Chirag Savla

Process Injection Tool Updates

Hello All, In the post I will highlight few updates that are made to improve the code base & add long pending features to the Process...