Bypassing UAC with UACMe - HEK.SI 2022 Conference Presentation
Comprehensive guide to bypassing User Account Control on Windows 10 for privilege escalation, presented at HEK.SI 2022. Covers techniques using UACMe tool to elevate privileges and enhance system access.
Windows Post Exploitation - Dumping & Cracking NTLM Hashes
Demonstra o processo de extração e quebra de hashes NTLM no Windows, além de cobrir o uso de hashes NTLM para ataques Pass-The-Hash em cenários de pós-exploração.
Revisiting Parrot OS - Pros and Cons for Penetration Testing
Explore the pros and cons of Parrot OS for penetration testing, including reasons for discontinuing its use and its current strengths and weaknesses in cybersecurity applications.
Log4J Vulnerability (Log4Shell) - Exploitation and Mitigation
Exploración detallada de la vulnerabilidad Log4Shell en Log4J, demostrando técnicas de explotación y mitigación en Apache Solr. Incluye explicación del impacto y gravedad de esta falla crítica de seguridad.
Windows Enumeration with winPEAS
Automate Windows local enumeration and identify privilege escalation vectors using winPEAS. Learn efficient techniques for system analysis and vulnerability detection.
Cybersecurity Career Roadmap - Paths, Certifications, and Skills
Explore diverse cybersecurity paths, certifications, and skills needed for transitioning into a cybersecurity career. Gain insights into industry-recognized resources and career progression opportunities.
Windows Red Team Credential Access Techniques - Mimikatz & WCE
Explore Windows credential access techniques using Mimikatz and WCE to dump passwords and hashes from memory. Learn post-exploitation methods for red team operations and penetration testing.
Windows Red Team Persistence Techniques - Persistence With PowerShell Empire
Explore Windows Red Team persistence techniques using PowerShell Empire for maintaining access to targets. Learn about this post-exploitation framework and its features for bypassing protections.
Linux Red Team Exploitation Techniques - Exploiting WordPress & MySQL
Aprenda técnicas de exploração de equipe vermelha para identificar e explorar vulnerabilidades em servidores Linux com aplicações web, focando em WordPress e MySQL.
Windows Red Team Exploitation Techniques - Luckystrike & PowerShell Empire
Explore Windows Red Team exploitation techniques for initial access, including creating malicious macro documents and setting up a C2 server with PowerShell Empire & Starkiller.
Red Team Reconnaissance Techniques
Explore active and passive reconnaissance techniques for Red Team operations, including information gathering on organizations, infrastructure, and personnel to support targeting and adversary lifecycle phases.
Red Team Adversary Emulation With Caldera
Explore automated Red Team adversary emulation using MITRE Caldera, a framework built on ATT&CK for simulating attacks and testing organizational security defenses.
Active Directory Enumeration With PowerView
Learn to perform Active Directory enumeration using PowerView, a powerful tool for gathering information about network domains, users, and computers in penetration testing scenarios.
Windows Post Exploitation - Local Enumeration
Learn manual local enumeration techniques for Windows targets using built-in commands to gather user, group, and system information, and identify active security features.
Steel Mountain Walkthrough - Manual Windows Exploitation
Gain initial foothold and elevate privileges on Windows target by exploiting Unquoted Service Paths manually and with Metasploit. Learn practical techniques for Windows penetration testing.
Exploiting Arbitrary File Upload
Exploración práctica de la vulnerabilidad de carga arbitraria de archivos en aplicaciones web para obtener acceso inicial a un sistema Linux objetivo.
HackTheBox Blocky Walkthrough - Linux Privilege Escalation
Learn Linux privilege escalation techniques using kernel exploits, demonstrated on HackTheBox "Blocky". Gain practical skills for enhancing system security and ethical hacking abilities.
Post Exploitation - Transferring Files to Windows Targets
Learn to transfer exploit files and enumeration tools to Windows targets using certutil, enhancing post-exploitation techniques for penetration testers and security professionals.
Kenobi Walkthrough
Comprehensive walkthrough of the Kenobi challenge on TryHackMe, covering SMB share enumeration, ProFTPD exploitation, and privilege escalation through SUID binary exploitation.
Vulnversity Walkthrough
Comprehensive walkthrough of the Vulnversity challenge on TryHackMe, covering reconnaissance, web application exploitation, and Linux privilege escalation techniques for ethical hacking practice.
Windows Privilege Escalation Tutorial for Beginners
Learn techniques for Windows privilege escalation, including local enumeration, exploit suggestion tools, token impersonation, hash dumping, and pass-the-hash attacks to gain elevated system access.