Parsing SVN Entries Files with PowerShell

Examines security issues in federated Skype for Business, showing how external domains can validate email addresses, read availability and out-of-office status, and deliver phishing messages.

Web servers exposing their .git directory hand attackers the full repository history: the article covers finding exposed repos, mirroring them with wget, and recovering source and config data.

Any domain user can query AD SPN records to enumerate every SQL Server—instances and ports included—without noisy scans; NetSPI's Get-SQLServerAccess module then tests each for accessible logins.

An early look at Python in Excel, where PY() formulas run code in Microsoft-hosted remote containers, with initial red team notes on exploring the runtime environment and capabilities.

Part three of the thick client series hunts sensitive data in the Windows file system and registry, with tips on focusing tests on installers, login forms, and Remember Me storage.

NetSPI describes scraping employee contacts from zoominfo.com for OSINT use, and releases a script that converts gathered names into emails and usernames for phishing and password spraying engagements.