PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Python ❤️ SSPI: Teaching Impacket to Respect Windows SSO

swarm.ptsecurity.com | research | #kerberos | #red-team | #impacket | #sspi | #tgt-delegation
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

PT SWARM shows how to add Windows SSPI support to Impacket via an Ntsecapi wrapper, covering Fake TGT Delegation that yields Kerberos tickets without elevation, helping red teams stay stealthy.
Published
Collected

Related coverage

research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · yokai.hakaisecurity.io
[EN] A Deep Dive into KeyTabExtractor Techniques
By: Lucas Hoffmann Revision: Thiago Bispo & Allan Kardec Technical Introduction Many modern corporations rely on Kerberos, a widely used network authentication protocol designed to validate identities and authorize access within corporate environments. Within this ecosystem, there are mechanisms that allow services to authenticate automatically, without human interaction, and one of the main ones is […]
research · yokai.hakaisecurity.io
Dicas e Truques de Purple team: Revisitando a Enumeração do Kerberos
Existem diferentes metodologias propostas para definir as etapas de uma avaliação da Red team. Independentemente da metodologia escolhida, a maioria concorda com a importância da fase de reconhecimento e enumeração, nas fases inicial e interna. Ciclo de Vida das Operações de Red team. Ao realizar a enumeração, somos capazes de validar as informações coletadas ou […]
research · yokai.hakaisecurity.io
Purple Team Tips and Tricks: Revisiting Kerberos Enum
There are different methodologies proposed to define the stages of a Red Team assessment, regardless of the chosen methodology, most agree on the importance of the reconnaissance and enumeration phase, in the initial and internal phases. Red Team Operation Lifecycle. By performing the enumeration, we are able to validate collected information or obtain new information […]
research · github.com
RPISEC: Malware Analysis Course Materials, Labs, and Projects (CSCI 4976)
Regarded as one of the best structured open-source university curriculums for practical reverse engineering and malware analysis, bridging the gap from fundamentals to kernel rootkits.
Back