A First Look at Python in Excel

GCPwn is a Python-based GCP pentesting framework inspired by Pacu. Part one covers installation and credential handling for ADC, OAuth2 tokens, and service account keys, plus enumeration modules.

NetSPI details a local privilege escalation in default Microsoft Service Fabric installs: unsecured clusters expose a web interface and writable files, letting low-privileged users escalate to SYSTEM.

Azure Site Recovery's Automation Account leaked a cleartext Contributor-level Managed Identity token in job output, enabling privilege escalation; NetSPI reported the flaw and Microsoft remediated it.

NetSPI describes scraping employee contacts from zoominfo.com for OSINT use, and releases a script that converts gathered names into emails and usernames for phishing and password spraying engagements.

Part of a login portal security series, covering how login submissions, account registration, and password reset flows can leak valid usernames through overly helpful server responses.

Demonstrates using PowerUpSQL and the xp_regwrite extended stored procedure to write Windows registry Run keys from SQL Server, establishing persistence with the service account's privileges.