Collaborate Disseminate
I’m reading this document and trying to figure out how to install multiple plugin automatically.
How can I automate this step on a new computer?
Where does burpsuite store the plugin files?
Continue reading Install burpsuite extension from cli [closed]
I’m reading this article: https://research.nccgroup.com/2022/09/06/sharkbot-is-back-in-google-play/ and quote:
Besides this, the dropper has also removed the ‘Direct Reply’ feature, used to automatically reply to the received notification… Continue reading What would an android malware do with Direct Reply feature?
I’m reading this document: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/exploit-protection-reference?view=o365-worldwide
In older OS, EMET injects a DLL into the process. On latest Windows EMET is implemented b… Continue reading EMET is deprecated, which DLL implements the ring3 mitigation?
I want to know what security features is added or improved in each Linux kernel release, is there anything like "security change log"?
I couldn’t find it on the internet, the only thing I found is this: https://github.com/iovisor… Continue reading Linux kernel changelog for security features [migrated]
I’ve enabled DS audits in domain controller group policy:
Then I perform dcsync attack with a normal user account, and check the logs in ELK:
Two logs were created and the DS-Replication-Get-Changes-All log is generated correctly, and no… Continue reading Incomplete information in dcsync logs [migrated]
I’m trying to find the DoubleFeature’s Rootkit sample in this article, quote
Resource 106, once decompressed, is a driver called hidsvc.sys
So I first downloaded the EQGRP_Lost_in_Translation repo and found the DLL containing the resourc… Continue reading Can’t find the sample in this article
I’m playing with mimikatz kerberos::golden, e.g.,
kerberos::golden /domain:XXX /sid:XXX /user:XXX /aes256:XXX /endin:864000 /renewmax:10240 /ptt
Then I tried to access a domain joined machine, but I got access denied:
dir \\IP_address\C$
… Continue reading Kerberos golden ticket works with DNS only – access denied with IP address
When I do nmap scan on SSH port I got
22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
Is it possible to modify SSH identification string or hide it?
Continue reading Remove sshd identification string [migrated]
I’m following this article to reproduce the EFS bug: https://blog.truesec.com/2021/08/05/from-stranger-to-da-using-petitpotam-to-ntlm-relay-to-active-directory/
My environment:
Windows 2016 AD (Hostname: W2016$)
Windows 2016 SRV01 (Runnin… Continue reading Trying to reproduce petitpotam exploit, got "KDC_ERROR_CLIENT_NOT_TRUSTED (62)" error
I’m reading this article, and it says:
The following functions are exposed over XPC to the caller:
@protocol _TtP4main21ForkLiftHelperProtcol_
– (void)changePermissions:(NSString *)arg1 permissions:(long long)arg2 reply:(void (^)(NSError … Continue reading Dumping available XPC interface and methods [migrated]