Severins kleine Cyber Seite

LinPEAS is a script that search for possible paths to escalate privileges on Linux/Unix*/MacOS hosts. The checks are explained on book.hacktricks.xyz Check the Local Linux Privilege Escalation checklist from book.hacktricks.xyz.

Operational resilience is a concept that has gained even further traction. It first came to prominence from financial regulators, in particular the Bank of England and then others. 

Over time, both targeted and large-scale enumeration of Active Directory (AD) environments have become increasingly detected due to modern defensive solutions.

The power of our XSS cheat sheet is we get fantastic contributions from the web security community and this update is no exception. We had valuable contributions from Mozilla to remove events that no https://portswigger.net/research/new-exotic-events-in-the-xss-cheat-sheet

What happens when hackers need to get creative? This month’s edition of The Red Team Chronicles looks at a story from Jason Haddix who needed to get thrifty with his team to get access to …

There are many well known, so called, laws of technology. Moore’s law being particularly emblematic. Let’s look at some of them and see what the security implications have been for each and what might further …

This post highlights why it is crucial to always push for white-box assessments during your security engagements. By comparing results and time invested in discovering various bug classes, it becomes evident that white-box consistently outperforms …

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol. – GitHub – FalconForceTeam/SOAPHound: SOAPHound is a custom-developed .NET data …

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory. – GitHub – S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet: A cheat sheet that contains common enumeration and attack methods for Windows Active Directory. https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

Sicherheitsforscher zeigen aktuelle Trends bei Verschlüsselungstrojanern auf. Unter anderem schrumpfen die Summen von Lösegeldern. Verschlüsselungstrojaner sind nach wie vor eine der größten Bedrohungen für IT-Systeme von Unternehmen. https://www.heise.de/news/Ransomware-Bericht-Immer-weniger-Opfer-zahlen-Loesegeld-9613134.html