CYBERSECURITY BLOGS

With GenericWrite or AddKeyCredentialLink on a user or computer, you can append a rogue Key Credential, authenticate via PKINIT, and take over the account without changing its password.

Penetration testing cheatsheet: Nmap, reconnaissance, enumeration, reverse shells, privilege escalation, and post-exploitation commands.

In this blog, we'll learn about the concept of DLL hijacking, a technique that attackers and pentesters alike use to gain unauthorized access to the system. We will learn what DLLs are and exploit the way Windows OS loads the DLL (Dynamic Link Libraries), along with practical implications for how attackers can leverage them.