If you have a login page which is reachable over the internet, at some point it's going to get attacked. The reason why is because it can be extremely easy for attackers to do so....
Brute Force Web Logins
Active Directory Scripts
I've created a bunch of Active Directory scripts to help identify attack points or stale accounts. This can be used for both, Blue and Red team members as they dive into abusable privileges....
RedRabbit Update
Find the latest here: https://github.com/securethelogs/RedRabbit
YouTube: Amass, Pwndrop and Sherlock
Check them out here: https://www.youtube.com/channel/UCX6XBBAw-G_9R1gzfKTzMYg
Phishing.web.core.windows.net
EvilGinx is a prime example of some of the amazing tools out there that came be used for Phishing. If you haven't heard of it, EvilGinx was release a few years back and showed us a weak point in 2FA. For most back then, MFA was a sure way to thwart the bad guys and it make the system or user account "impenetrable".....
Living Off The Land: Suspicious System32
The services below are some of the most commonly abused services for malicious parties to "live of the land". Each are built into Windows and inherit trust by default. Because of this, security controls won't ever be able to fully isolate them without affecting the operating system. For example, your endpoint protection can't block command prompt and Powershell because engineers use them for automation tasks, nor can it block task scheduler or certuitl.......
Now on YouTube!
Hacking With Powershell: Malware
With malicious parties continuing to use Powershell as their way in, I thought I would look into how it's being used and what can be done to prevent it. This is something I've covered before, so think of this as a part 3............
What’s This About Zoom?
Zoom has helped millions stay in connect during these hard times and you can see why it was the preferred option. Other services such as Webex or Skype are just too clunky and in my opinion, the simplicity of Zoom was........
PSWatcher – Now Automated
Read the article here: https://securethelogs.com/pswatcher-3/
