PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Gold Mine Red Teamers Never Touch

abdulmhsblog.com | blog | #kerberos | #windows-security | #ntlm | #red-team | #reverse-engineering | #detection | #windows-source-code | #weaponization
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Argues the leaked Windows XP and Server 2003 source code is an underused red team resource, since Kerberos and NTLM implementations remain mostly unchanged and reveal what MS-* specifications omit.
Published
Collected

Related coverage

blog · semperis.com
When Is WinRM Over HTTP Secure?
WinRM over HTTP isn't the cleartext disaster people assume — payloads are encrypted at the application layer — and the post explains when HTTPS genuinely adds value and when it doesn't.
blog · semperis.com
What You’re Missing: Proper LAN Manager Authentication Levels
Why LAN Manager authentication level 2 on domain controllers is risky — and how moving to level 3 blocks outbound NTLMv1 while keeping legacy compatibility, a fix you can apply today.
tool · github.com
node2shell-scanner: High-Fidelity Remote Detection Tool for Node.js Brotli OOB Write (CVE-2026-111497)
Provides defenders and security teams with a safe, non-destructive, and high-fidelity method to scan large attack surfaces and confirm Node.js exposure to the critical Brotli decoder flaw.
tool · github.com
ipatool (DrWhax Fork): App Store CLI with Native FairPlay Decryption Pipeline & MCP Integration
Significantly streamlines iOS security auditing and reverse engineering by providing an all-in-one CLI and MCP workflow to retrieve App Store packages and decrypt FairPlay binaries for static analysis.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
tool · github.com
SuperGhidra: High-Performance Python Suite for Accelerated Ghidra Reverse Engineering
Drastically accelerates automated binary analysis and provides reliable mathematical verification for neural decompilers, bridging traditional reverse engineering with AI-driven workflows.
Back