Collaborate Disseminate
I’m currently working on a lab for AD penetration testing and want some of the machines to have a logon, including the TGT, for a specific domain user cached. So far I couldn’t come up with anything better than using the Winlogon feature. … Continue reading simulating a domain user logon on machine startup
Recently, doing "whois" on random large Fortune 500 style bricks-and-mortar companies, I’ve seen a few use private/"anonymous" registrations.
Normally you see stuff like
Registrant Organization: Levi Strauss and Co.
Reg… Continue reading Would a bricks-and-mortar large firm benefit from anonymous domain registration?
I have a domain that is about to expire. It was used for hosting my freeware which I do not maintain anymore but can still be found on shareware directories. The application points to my domain (hardcoded) for further info.
What I am afrai… Continue reading Domain about to expire. Afraid that new owners will spread malware
This content is for members only. Visit the site and log in/register to read.
Continue reading Exposing A Domain Portfolio of E-Shops for Stolen Credit Cards – An OSINT Analysis – A PDF Paper
This content is for members only. Visit the site and log in/register to read.
Continue reading Exposing a Domain Portfolio of Cybercrime-Friendly Forum Communities – An OSINT Analysis – A PDF Paper
This content is for members only. Visit the site and log in/register to read.
Continue reading Exposing a Currently Active Domain Portfolio of Currently Active High-Profile Cybercriminals Internationally – A PDF Paper
This content is for members only. Visit the site and log in/register to read.
Continue reading Exposing a Currently Active NSO Spyware Group’s Domain Portfolio – An OSINT Analysis – A PDF Paper
Imagine a country ruled by a non-democratic government with an explicit disregard to local and international laws. The national registry for local domains (Country code top-level domains) falls under their area of influence. We know that t… Continue reading Country code top-level domain (ccTLD) hijacking?
What additional features would "licensed" anti-malware bring to a Domain Controller, as opposed to simply using Windows Defender ? I know that Windows Defender is a decent protection for end-user workstations but why would it not… Continue reading What additional features would "licensed" anti-malware solutions bring to a Domain Controller?
Are there any security reasons against "drop-www"?
In other words, are there any security reasons against using an apex [1] domain name such as example.com instead of a subdomain such as www.example.com?
Quote https://www.bjornjo… Continue reading Are there any security reasons against "drop-www" (using example.com instead of www.example.com)?