First: What is OSINT OSINT is an abbreviation that stands for Open Source Intelligence Gathering. It consists of techniques used by adversaries and pentesters alike to identify information about a target organization that provides information to the operator such as: OSINT is passive in nature and primarily relies on information obtained without actually sending traffic […]
Jams all day: Introduction So you’re on a network doing a pentest. You’ve escalated privileges and it’s time to extract hashes from the DC. DCSync attacks are widely known and widely detected on. What if there was a way to perform a DCSync without executing the attack or triggering an alert for the activity? We’d […]
But first, tunes: Introduction Microsoft Azure is an incredibly powerful tool that enables organizations to manage resources, identities, applications, installation of software to on-premises systems, and even manage devices. One of the ways an organization can manage devices is through the use of Device Join. One of the most well known attacks against Azure Joined […]
Alright! Let’s start this thing off! But first, Music: To get you up to speed on the format of these blog posts, there should always be: My goal here is to provide offensive leaning content that will aid the Cybersecurity community as a whole and, where possible / applicable, provide a means of detecting or […]
