How to: Kerberoast like a boss

Kerberoasting: by default, all standard domain users can request a copy of all service accounts along with their correlating password hashes. Crack these and you could have administrative privileges. But that’s so 2014. Why write a blog post about this in 2019 then? It still works well, yet there...

BASE <= 1.2.4 (Auth Bypass) Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================== BASE = 1.2.4 Auth Bypass Insecure Cookie Handling Vulnerability ================================================================== Authentication Bypass in BASE version 1.2...

BASE 1.2.4 Authentication Bypass

Authentication Bypass in BASE version 1.2.4 and prior - Insecure Cookie Handling Vulnerability -------------------------------------------- Author.: Tim Medin Contact: nidem.nidem at gmail d0t com -------------------------------------------------------------------------------------------------...