Curated security research, vulnerabilities, advisories and tools for practitioners.

netspi.com

Security coverage collected from netspi.com. (Page 19)

541.

The Evolution of Offensive PowerShell Invocation

blog | 2015-12-28 00:00 | netspi.com | original ↗ | #red-team | #powershell | #dotnet

542.

Malicious Outlook Rules

blog | 2015-12-04 00:00 | netspi.com | original ↗ | #phishing | #red-team | #powershell

543.

Hashdump without the DC using DCSync (because we all wanted it)

blog | 2015-10-02 00:00 | netspi.com | original ↗ | #active-directory | #powershell | #mimikatz

544.

Exploiting MS15-076 (CVE-2015-2370)

vulnerability | 2015-08-12 00:00 | CVE-2015-2370 | netspi.com | original ↗ | #privilege-escalation | #windows | #ntlm-reflection

545.

PowerShell Remoting Cheatsheet

blog | 2015-07-31 00:00 | netspi.com | original ↗ | #windows | #cheatsheet | #winrm

546.

Auto-Dumping Domain Credentials using SPNs, PowerShell Remoting, and Mimikatz

blog | 2015-07-27 00:00 | netspi.com | original ↗ | #active-directory | #red-team | #mimikatz

547.

10 Places to Stick Your UNC Path

blog | 2015-07-22 00:00 | netspi.com | original ↗ | #pentesting | #smb | #xxe

548.

Tearing Apart a Datto Device

blog | 2015-06-18 00:00 | netspi.com | original ↗ | #pentesting | #hardware-hacking | #backup

549.

Collecting Contacts from LinkedIn Using linkedin_crawl

blog | 2015-06-01 00:00 | netspi.com | original ↗ | #osint | #reconnaissance | #phishing

550.

Debugging Burp Extensions

blog | 2015-05-26 00:00 | netspi.com | original ↗ | #java | #debugging | #extensions

551.

A Faster Way to Identify High Risk Windows Assets

blog | 2015-05-21 00:00 | netspi.com | original ↗ | #vulnerability-management | #active-directory | #windows

552.

Top 10 Critical Findings of 2014 – Mobile Applications

blog | 2015-05-11 00:00 | netspi.com | original ↗ | #sql-injection | #android | #mobile-security

553.

Running LAPS Around Cleartext Passwords

blog | 2015-05-05 00:00 | netspi.com | original ↗ | #active-directory | #lateral-movement | #ldap

554.

Forcing XXE Reflection through Server Error Messages

blog | 2015-05-04 00:00 | netspi.com | original ↗ | #xxe | #xml | #web-pentesting

555.

GPU Cracking: Rebuilding the Box

blog | 2015-04-27 00:00 | netspi.com | original ↗ | #pentesting | #hardware | #gpu

556.

Playing with Content-Type – XXE on JSON Endpoints

blog | 2015-04-20 00:00 | netspi.com | original ↗ | #pentesting | #web-security | #ssrf

557.

Top 10 Critical Findings of 2014 – Thick Applications

blog | 2015-04-13 00:00 | netspi.com | original ↗ | #pentesting | #application-security | #thick-client

558.

Decrypting WebLogic Passwords

blog | 2015-04-06 00:00 | netspi.com | original ↗ | #pentesting | #lateral-movement | #oracle

559.

All You Need Is One – A ClickOnce Love Story

blog | 2015-03-23 00:00 | netspi.com | original ↗ | #windows | #phishing | #red-team

560.

Hacking SQL Server Procedures – Part 4: Enumerating Domain Accounts

blog | 2015-03-16 00:00 | netspi.com | original ↗ | #active-directory | #privilege-escalation | #sql-injection

561.

ActiveX + XSS = ActiveXSS Pwnage!

vulnerability | 2015-03-05 00:00 | netspi.com | original ↗ | #pentesting | #fuzzing | #xss

562.

iOS Tutorial – Dumping the Application Memory Part 2

blog | 2015-03-09 00:00 | netspi.com | original ↗ | #reverse-engineering | #ios | #mobile-pentesting

563.

NetSPI's Top Cracked Passwords for 2014

blog | 2015-03-02 00:00 | netspi.com | original ↗ | #windows | #ntlm | #password-cracking

564.

Dumping Git Data from Misconfigured Web Servers

blog | 2015-02-02 00:00 | netspi.com | original ↗ | #git | #pentesting | #web-security

565.

Decrypting MSSQL Credential Passwords

blog | 2015-01-26 00:00 | netspi.com | original ↗ | #powershell | #post-exploitation | #mssql

566.

Advisory: XXE Injection in Oracle Database (CVE-2014-6577)

vulnerability | 2015-01-21 00:00 | CVE-2014-6577 | netspi.com | original ↗ | #ssrf | #xxe | #oracle

567.

Attacking Android Applications With Debuggers

blog | 2015-01-19 00:00 | netspi.com | original ↗ | #android | #reverse-engineering | #debugging

568.

Hacking SQL Server Stored Procedures – Part 3: SQL Injection

vulnerability | 2015-01-12 00:00 | netspi.com | original ↗ | #privilege-escalation | #sql-injection | #sql-server

569.

iOS Tutorial – Dumping the Application Heap from Memory

blog | 2015-01-05 00:00 | netspi.com | original ↗ | #memory-forensics | #ios | #gdb

570.

An Introduction to the Open Software Assurance Maturity Model (OpenSAMM)

blog | 2014-12-22 00:00 | netspi.com | original ↗ | #appsec | #owasp | #sdlc

← Previous More →