offensive
Abuse Cloudflare Zerotrust for C2 channels
What is Zero Trust Security? Zero Trust security is an IT security model that requires strict identity verification for every person and device trying…
security research & development (SRD)
MalewareBytes Support tool – SAM hash dump?
Malwarebytes provides a support tool that automatically repairs and fixes software issues and broken configurations, that’s actually common for anti-malware software to…
offensive
Follina – CVE-2022-30190 RTF
Intro a recent code execution vulnerability targeting office365 using unpatched vulnerability which allows client-side command execution via ms-msdt protocol. the first appearance…
offensive
Mortar Loader v2
https://github.com/0xsp-SRD/mortar Words to say I released the Mortar loader a couple of months ago, and it was good results in defeating and…
Malware Research
Porting Backdoors – Windows rootkits via RESTful API Service
Research Agenda Part1 – porting the backdoor for windows (READY) Part2 – porting the backdoor for Linux/Unix (IN PROGRESS) Part3 – hiding the…
offensive
Active Directory (Attack & Defense )
This is the 2026 revision of Active Directory (Attack & Defense), first published in April 2022. The content might have under frequent changes.…
security research & development (SRD)
combined attacks against XDR
Intro Despite the fact, XDR products play bulletproof against newly cyber by newly updated built-in defensive techniques and procedures, there are small…
security dev
0xsp-mongoose RED
Intro 0xsp mongoose red is a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfiguration, and…
offensive
Hunting Windows Credentials (CredUIPromptForWindowsCredentials)
intro I recently started to do Live streaming on twitch and youtube to cover some techniques and do some live coding sessions.…
offensive
bypass restricted command prompt for none-privileged users
intro The Windows Command Prompt (sometimes called the DOS prompt) is a tool that allows administrators to invoke system-wide commands to make…