PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dicas e Truques de Purple team: Revisitando a Enumeração do Kerberos

yokai.hakaisecurity.io | research | #vulnerability-research | #kerberos | #insights
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Existem diferentes metodologias propostas para definir as etapas de uma avaliação da Red team. Independentemente da metodologia escolhida, a maioria concorda com a importância da fase de reconhecimento e enumeração, nas fases inicial e interna. Ciclo de Vida das Operações de Red team. Ao realizar a enumeração, somos capazes de validar as informações coletadas ou […]
Published
Collected

Related coverage

research · yokai.hakaisecurity.io
Purple Team Tips and Tricks: Revisiting Kerberos Enum
There are different methodologies proposed to define the stages of a Red Team assessment, regardless of the chosen methodology, most agree on the importance of the reconnaissance and enumeration phase, in the initial and internal phases. Red Team Operation Lifecycle. By performing the enumeration, we are able to validate collected information or obtain new information […]
research · yokai.hakaisecurity.io
[EN] A Deep Dive into KeyTabExtractor Techniques
By: Lucas Hoffmann Revision: Thiago Bispo & Allan Kardec Technical Introduction Many modern corporations rely on Kerberos, a widely used network authentication protocol designed to validate identities and authorize access within corporate environments. Within this ecosystem, there are mechanisms that allow services to authenticate automatically, without human interaction, and one of the main ones is […]
research · yokai.hakaisecurity.io
LDAP - Entender Para Atacar
Quando realizamos testes internos, é comum o uso do LDAP (Lightweight Directory Access Protocol), mas pouco se entende sobre sua real função, utilidade e o quão poderoso esse protocolo pode ser. E como nosso lema é: “Entenda para atacar”, vamos explorar o que é o LDAP, sua origem, a versão anterior, suas nuances e muito […]
research · yokai.hakaisecurity.io
LDAP - Know To Attack
When performing internal tests, it’s common to use LDAP (Lightweight Directory Access Protocol), but its true purpose, utility, and power are often misunderstood. And since our motto is “Understand before you attack,” we’ll explore what LDAP is, its origins, the earlier version, its nuances, and much more. What are DAP and LDAP? DAP (Directory Access […]
research · yokai.hakaisecurity.io
Beerus Framework – Um Novo Framework Mobile Surge
Abstract O Beerus Framework é uma ferramenta ofensiva mobile desenvolvida para facilitar todo o processo de pentest em dispositivos Android. Com uma interface unificada diretamente no dispositivo, o Beerus permite realizar desde a instrumentação de aplicações de forma built-in no dispositivo com Frida Core, exfiltração de dados do sandbox, memory dumping, proxying, controle de módulos […]
research · yokai.hakaisecurity.io
Beerus Framework – A New Mobile Framework Arises
Abstract The Beerus Framework is an offensive mobile tool developed to simplify the entire pentesting process on Android devices. With a unified interface directly on the device, Beerus allows performing tasks ranging from application instrumentation in a built-in way on the device with Frida Core, sandbox data exfiltration, memory dumping, proxying, Magisk module control, property […]
Back