Collaborate Disseminate
I have found a well known way to bypass an antivirus solution and run well known malicious powershell scripts. The method is the 6+ year old way of shutting down amsi and running the powershell script via iex (and calling it over the inter… Continue reading How to prevent amsi bypass powershell Windows 10
A friend of mine gave me a web application for me to test and find vulnerabilities. He told me that this web application can be purposefully modified and then made to run an SQL injection. I have been trying everything, but I have not bee… Continue reading SQL Injection and Hidden parameter modification
Is it possible to bypass NTFS encryption if the password used to encrypt the RSA key is a password to an AD account? So if an administrator can simply change your password, they would then be able to decrypt your files. My understanding of… Continue reading Bypass NTFS Encryption via Password Change (Encrypting File System)
I am looking to do the maximum process mitigations for most processes (such as web browsers, document viewers, etc) on my Windows 10 machine (Via powershell’s set-processmitigation). However, I can’t find any resources online for a best pr… Continue reading Any Recommended Windows 10 Process Mitigations
I was wondering if it is possible to create some sort of database that is physically impossible to enter. While creating it, you store some information in it and program it to spit that information after a period of time. But not even you … Continue reading Is it possible for a database to be impenetrable?
It looks like AI is out to get some of us. The button pushers. One click on vulnerability scanner or zenmap etc…
I was wondering what kind to cybersecurity obs could not be easily replaced by AI.
On the top of my head, I’d say : threat … Continue reading What type of cybersecurity jobs can’t be replaced by AI? [closed]
If you run the command cryptsetup luksDump /dev/sda5 (change device to whatever LUKS encrypted device), you will get an output, and at the end there is a section “Digests” which contains something like this:
Digests:
0: pbkdf2
Hash:… Continue reading What is the Digests section in cryptsetup
I found some serious vulnerabilities in my university’s infrastructure. The infrastructure is a web app built with Spring and it’s developed and used solely by the University.
Using it I can get sensitive information for all students and … Continue reading I found a security vulnerability in a web app developed by my university. Can it have a CVE number?
I’m investigating a login system that exposes (probably) hashed passwords.
Password: HTSr0MF8Ou4liOCUayXHDg==
The password is stored in base64 format. When I decode it, I get random 8 chars regardless of password length.
The characters… Continue reading Hash that outputs a 8 characters [duplicate]
I’ve read that many types of malware scan a system for various clues regarding virtualization software, in order to stifle forensics. Is there any way to hide the fact that a computer is a virtual machine from malware?
Continue reading How to hide the fact that a system is virtual machine from malware