🦜 Penetration Testing Lab
@pentestlab.blog@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline!
Brought to you by the RSS Parrot.
---
Offensive Techniques & Methodologies
Your feed and you don't want it here? Just
e-mail the birb.
Web Browser Stored Credentials
https://pentestlab.blog/2024/08/20/web-browser-stored-credentials/
Published: August 20, 2024 07:00
Microsoft introduced Data Protection Application Programming Interface (DPAPI) in Windows environments as a method to encrypt and decrypt sensitive data such as credentials using the… Continue reading → Web Browser Stored Credentials
Persistence – DLL Proxy Loading
https://pentestlab.blog/2024/04/03/persistence-dll-proxy-loading/
Published: April 3, 2024 06:57
DLL Proxy Loading is a technique which an arbitrary DLL exports the same functions as the legitimate DLL and forwards the calls to the legitimate… Continue reading → Persistence – DLL Proxy Loading
Persistence – Explorer
https://pentestlab.blog/2024/03/05/persistence-explorer/
Published: March 5, 2024 07:54
Windows File Explorer is the is the graphical file management utility for the Windows operating system and the default desktop environment. Windows explorer was introduced… Continue reading → Persistence – Explorer
Persistence – Visual Studio Code Extensions
https://pentestlab.blog/2024/03/04/persistence-visual-studio-code-extensions/
Published: March 4, 2024 06:19
It is not uncommon developers or users responsible to write code (i.e. detection engineers using Sigma) to utilize Visual Studio Code as their code editor.… Continue reading → Persistence – Visual Studio Code Extensions
AS-REP Roasting
https://pentestlab.blog/2024/02/20/as-rep-roasting/
Published: February 20, 2024 07:25
Active Directory users that have the Kerberos pre-authentication enabled and require access to a resource initiate the Kerberos authentication process by sending an Authentication Server… Continue reading → AS-REP Roasting
Persistence – Windows Setup Script
https://pentestlab.blog/2024/02/05/persistence-windows-setup-script/
Published: February 5, 2024 05:53
When the Windows Operating system is installed via a clean installation or via an upgrade, the Windows Setup binary is executed. The Windows setup allows… Continue reading → Persistence – Windows Setup Script
Persistence – Disk Clean-up
https://pentestlab.blog/2024/01/29/persistence-disk-clean-up/
Published: January 29, 2024 05:59
Disk Clean-up is a utility which is part of Windows operating systems and can free up hard drive disk space by deleting mainly cache and… Continue reading → Persistence – Disk Clean-up
Domain Escalation – Backup Operator
https://pentestlab.blog/2024/01/22/domain-escalation-backup-operator/
Published: January 22, 2024 07:15
The Backup Operators is a Windows built-in group. Users which are part of this group have permissions to perform backup and restore operations. More specifically,… Continue reading → Domain Escalation – Backup Operator
Lateral Movement – Visual Studio DTE
https://pentestlab.blog/2024/01/15/lateral-movement-visual-studio-dte/
Published: January 15, 2024 07:09
A lot of organizations have some sort of application development program and it is highly likely that developers will utilize Visual Studio for their development… Continue reading → Lateral Movement – Visual Studio DTE
Persistence – Event Log
https://pentestlab.blog/2024/01/08/persistence-event-log/
Published: January 8, 2024 07:21
Windows Event logs are the main source of information for defensive security teams to identify threats and for administrators to troubleshoot errors. The logs are… Continue reading → Persistence – Event Log