This post demonstrates how to use SSH to create a
Continue readingWhich Ports does Nmap Scan by Default?
Nmap is an excellent and popular network scanner. During a
Continue readingNo HTTP Strict Transport Security (HSTS) Proof of Concept with Man-in-the-Middle-Framework (MITMF)
No HTTP Strict Transport Security (HSTS) Proof of Concept People
Continue readingNishang – Out-Excel
Nishang has a set of client side attack scripts designed
Continue readingPowerShell Internet Explorer Browser Automation
This post has an example of using PowerShell to automate IE.
Continue readingUpgrading from a Non-TTY Terminal to a Full Shell
Assume you are able to exploit a vulnerable service and
Continue readingMethods to Avoid Command History
A common thing to do during post exploitation is to
Continue readingUsing Powershell for File Integrity
Powershell uses the Get-FileHash cmdlet to generate a unique hash
Continue readingSending Email with PowerShell
Largely taken from here and here, the following example shows
Continue readingCritical Security Control One (CSC 1) – Inventory of Authorized and Unauthorized Devices
I created a poor man’s solution to CSC 1 by writing
Continue reading