A detailed walkthrough of the process and hurdles faced in leveraging Evilginx3 to conduct a successful phishing campaign on a AD FS protected domain.

Using a combination of Cloudflare and HTML Obfuscation, it is possible to protect your Evilginx server from being flagged as deceptive and so increase your chances of success on Red Team and Social Engineering engagements. Anyone who has tried to run a Social…

Four vulnerabilities collectively called "Leaky Vessels" allow hackers to escape containers and access data on the underlying host operating system.

YARA signature and IOC database for my scanners and tools - Neo23x0/signature-base

In this post, we will analyze how Vanguard attempts to keep away bad actors by utilizing a simple yet brutally strong method

Understanding the Impact and Solutions for CVE-2024–21626, CVE-2024–23651, CVE-2024–23652, and CVE-2024–23653 in Containerized Environments

Reverse shell that can bypass windows defender detection - emrekybs/nim-shell

A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot), sqlite, excel and d2-lang. Simply put it's nmap converter. - vdjagilev/nmap-formatter

Podcast Episode · Ask A CISO · 09/28/2022 · 38m

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly. - Xre0uS/MultiDump

Stepped up coordination among Iranian cyber actors may improve their ability to hit U.S. critical infrastructure, Microsoft researchers say.