CYBERSECURITY BLOGS

Mail and SNMP enumeration for penetration testing: SMTP user enumeration, open relay checks, POP3/IMAP banners, and SNMP community strings with Nmap.

With GenericWrite or AddKeyCredentialLink on a user or computer, you can append a rogue Key Credential, authenticate via PKINIT, and take over the account without changing its password.

Web server enumeration for penetration testing: HTTP and HTTPS banner grabbing, directory discovery, technology fingerprinting, and SSL/TLS checks.

Build a small WDM test driver with an intentional IOCTL bug, talk to it from user mode, then instrument the harness with WinAFL and DynamoRIO in a disposable VM.

Practical port enumeration for penetration testing: FTP and SSH banner grabbing, anonymous login checks, version detection, and Nmap techniques.