2024-09-02 |
From a GLPI patch bypass to RCE |
|
|
2024-07-11 |
make prs, not war |
|
|
2024-07-08 |
Dumping LSA secrets: a story about task decorrelation |
|
|
2024-07-08 |
Black Hat Card Deck CTF |
|
|
2024-07-03 |
Deck of Cards CTF |
|
|
2024-06-25 |
Targeting an industrial protocol gateway |
|
|
2024-06-03 |
Guest vs Null session on Windows |
|
|
2024-04-08 |
From Discovery to Disclosure: ReCrystallize Server Vulnerabilities |
|
|
2023-09-06 |
hash-cracker – password cracking done effectively |
|
|
2023-07-28 |
Orange Cyberdefense at Hacker Summer Camp |
|
|
2023-07-27 |
P4wnP1-LTE |
ge0rg |
|
2023-07-03 |
select * from projectdiscovery join steampipe |
|
|
2023-06-09 |
an offensive look at docker desktop extensions |
|
|
2023-05-31 |
Investigating the Wink Hub 2 |
|
|
2023-04-21 |
From BitLocker-Suspended to Virtual Machine |
night-rider |
|
2023-03-31 |
Protected Users: you thought you were safe uh? |
|
|
2023-02-28 |
Decoding BlazorPack |
|
|
2023-02-01 |
Jumping into SOCKS |
|
|
2022-12-02 |
CertPotato – Using ADCS to privesc from virtual and network service accounts to local system |
|
|
2022-10-31 |
Abusing Windows’ tokens to compromise Active Directory without touching LSASS |
sacrosanct |
|
2022-10-21 |
Sail away, sail away, sail away |
|
|
2022-09-30 |
WireSocks for Easy Proxied Routing |
882542F3884314B |
|
2022-09-01 |
sensecon 2022 – wait a minute, you got legs? edition |
|
|
2022-07-29 |
me vs request smugglingPOST |
|
|
2022-05-30 |
using a cloud mac with a local ios device |
|
|
2022-05-18 |
Constrained Delegation Considerations for Lateral Movement |
|
|
2022-02-17 |
Left To My Own Devices – Fast NTCracking in Rust |
pgraf |
|
2022-02-07 |
SIM Hijacking |
Luc |
|
2022-02-07 |
SIM Hijacking |
|
|
2021-12-20 |
Android Application Testing Using Windows 11 and Windows Subsystem for Android |
|
|
2021-11-02 |
sensecon 2021 – wargames edition |
|
|
2021-09-29 |
Building an offensive RPC interface |
|
|
2021-08-02 |
blackhat_defcon_virtual_vegas_2021.zip |
|
|
2021-07-28 |
Come do Wi-Fi! |
|
|
2021-07-22 |
Exploring The Fundamentals |
|
|
2021-07-20 |
Our Enterprise Infrastructure Hacking Course |
|
|
2021-05-28 |
Adventures into HTTP2 and HTTP3 |
mkl95 |
|
2021-04-29 |
Android Application Specific Proxies, Easy Mode |
|
|
2021-04-16 |
Duo Two-factor Authentication Bypass |
xooxies |
|
2021-03-31 |
on ios binary protections |
|
|
2021-03-26 |
From 500 to Account Takeover |
|
|
2021-03-12 |
Let me store that for you |
|
|
2021-02-28 |
dwn – a docker pwn tool manager experiment |
|
|
2021-02-28 |
sconwar – sensecon 2020 |
|
|
2021-02-28 |
DualSense Reverse Engineering |
|
|
2021-02-28 |
sensecon 2020 ex post facto |
|
|
2021-02-28 |
Szensecon Discord Bot |
|
|
2021-02-28 |
thumbscr-ews – a python EWS tool |
|
|
2021-02-28 |
More On Foreign Hashes |
|
|
2021-02-28 |
Pass-the-hash WiFi |
|
|
2021-02-28 |
DirectAccess and Kerberos Resource-based Constrained Delegation |
|
|
2021-02-28 |
NTHashes and Encodings |
|
|
2021-02-28 |
SensePost is now an ethical hacking team of Orange Cyberdefense |
|
|
2021-02-28 |
ACE to RCE |
|
|
2021-02-28 |
Seeing (Sig)Red |
|
|
2021-02-28 |
Avoiding detection via DHCP options |
|
|
2021-02-28 |
Covert Login Alerting |
|
|
2021-02-28 |
Making the Perfect Red Team Dropbox (Part 2) |
|
|
2021-02-28 |
Multiple Android User Profiles |
|
|
2021-02-28 |
building a hipster-aware pi home server |
leonjza |
|
2021-02-28 |
Clash of the (Spam)Titan |
todsacerdoti |
|
2021-02-28 |
Routopsy – Hacking Routing with Routers |
rishabhd |
|