GroupPolicyBackdoor

GroupPolicyBackdoor GroupPolicyBackdoor — это утилита на Python для манипуляции и эксплуатации объектов групповой политики GPO. Векторы атак через GPO очень часто могут приводить к серьёзным сценариям повышения привилегий в средах Active Directory. И всё же специалисты по offensive security могут...

akto

...

defcon32

Defcon 32 - Diapositives de l'atelier BugBounty Village Diapositives de la présentation Dévoiler les vulnérabilités : un guide complet pour la reconnaissance en Bug Bounty Documentation ProjectDiscovery Docs Installation des outils ProjectDiscovery Installez PDTM Atelier Fuzzing / DAST...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

defcon33_silence_kill_edr

🛡️ DEFCON Workshop : Remettre les EDR à leur place 💀 Tuer et faire taire les agents EDR comme un adversaire Setup Kill d'EDR Évitement d'EDR personnalisé 🎯 Ce que vous allez faire Chaque étudiant disposera de son propre environnement de laboratoire pour : 🔍 Investiguer un agent EDR live : découvri...

DEFCON-CICD-pipelines-workshop

CI/CD: Новое Эльдорадо? Аннотация Конвейеры CI/CD всё чаще становятся неотъемлемой частью стандартной инфраструктуры внутри команд разработчиков, а с ростом популярности таких подходов, как Infrastructure as Code, уровень чувствительности таких конвейеров быстро растёт. В случае компрометации под...

Lsass-Shtinkering

Lsass Shtinkering Nouvelle méthode de dump de LSASS en abusant du service Windows Error Reporting. Elle envoie un message au service avec le protocole ALPC pour signaler une exception sur LSASS. Ce rapport amènera le service à dumper la mémoire de LSASS. Prérequis La valeur de registre "DumpType"...

DefCon25

Configuration du laboratoire 1. 2 machines virtuelles = Win7 x64 & Win10RS1/2 x64 2. Extraire "DefCon-Tool.zip" à la racine du lecteur C 3. Suivre les diapositives et Lab-Writeup.txt...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

phishing-frenzy

Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...

assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

EventLogging

Avis Ce dépôt n'est plus maintenu depuis avril 2024. BHIS Avis Ce dépôt n'est plus maintenu depuis avril 2024. EventLogging Ce dépôt contient des recommandations pour la configuration de la journalisation des événements. Ces recommandations sont divisées en sections, Condition de préparation...

defcon_27_windbg_workshop

Atelier DEFCON 27 "Modern Debugging with WinDbg Preview" Ce dépôt contient les supports de l'atelier DEFCON 27 Vue d'ensemble Résumé Nous sommes en 2019 et pourtant, trop de développeurs Windows et de hackers s'appuient encore, les uns comme les autres, sur des outils utiles mais plutôt old schoo...

defcon27_csharp_workshop

This repository contains a collection of C code snippets and labs for writing custom backdoor payloads, as part of a workshop presented at Defcon 27. The code covers various topics, including Windows API calls, memory allocation, thread creation, and encryption. The code snippets are organized in...

Virtualized (In)Security: How Attackers Can Weaponize VBS Enclaves

Read about Ori David’s presentation at DEF CON 33 and learn how attackers can abuse VBS enclaves, a Windows security feature, for malicious purposes...

Clickjack attack steals password managers’ secrets

Sometimes it can seem as though everything's toxic online, and the latest good thing turned bad is here: Browser pop-ups that look like they're trying to help or authenticate you could be programmed to steal data from your password manager. To make matters worse, most browser extension-based...

Ex-NSA Chief Paul Nakasone Has a Warning for the Tech World

At the Defcon security conference in Las Vegas on Friday, Nakasone tried to thread the needle in a politically fraught moment while hinting at major changes for the tech community around the corner...

The Hacker Who Hunts Video Game Speedrunning Cheaters

Allan “dwangoAC” has made it his mission to expose speedrunning phonies. At the Defcon hacker conference, he’ll challenge one record that's stood for 15 years...

CloudRecon - Finding assets from certificates

CloudRecon Finding assets from certificates! Scan the web! Tool presented @DEFCON 31 Install You must have CGO enabled, and may have to install gcc to run CloudRecon sudo apt install gcc go install github.com/g0ldencybersec/CloudRecon@latest Description CloudRecon CloudRecon is a suite of tools f...

There’s One Last Gift Under the Tree, It’s Hands-On IoT!

It’s the holiday season and since we’re in a giving mood we thought we’d surprise our loyal readers with a fun, hands-on hardware exercise to enjoy during some well-earned downtime. But first, a little background. Every year Rapid7 has a pretty solid presence at DefCon in Las Vegas. This year was...