Blog Posts

Exploiting log4j | Apache Solr

Log4j is a popular Java library maintained by the Apache foundation used as a logging framework for Java. Around Friday 10th December...

McAfee quarantine files - Automating BUP file analysis.

Quarantine (.BUP) files, otherwise known as BackUp files, are created by various applications such as McAfee antivirus. McAfee will...

Post compromise analysis | Overpass 2

In this write up, we will be playing the role of an incident responder, post compromise of a system. The task is to identify what the...

How to use Hydra to brute force login forms.

Hydra is a very powerful and fast password cracking tool which can also perform dictionary attacks against a wide range of protocols such...

Exploiting log4j | Apache Solr

Log4j is a popular Java library maintained by the Apache foundation used as a logging framework for Java. Around Friday 10th December...

Enumerating Active Directory using BloodHound.

90% of the Global Fortune 1000 companies use Active Directory as their primary method of authentication and authorization. This plays a...

Exploiting EternalBlue | MS17-010

In this blog we will be walking though a machine from the Cybermentors course; Practical Ethical Hacking (PEH). The main lesson from this...

Golden Ticket attacks

Once we have compromised a Domain Controller we want to gain a level of persistence on the domain. We can do this by crafting Golden-Tickets

Attacktive Directory

This will be my first of many Active Directory themed blogs focused around exploitation. I have recently been exposed to a lot of Active...

Analysing a Phishing Kit

In this blog post, we will be analysing a very recent Phishing Kit that was found to be active last month. We will be taking a look at...

Academy

This is my first blog post walking through a machine from the Cybermentors course Practical Ethical Hacking (PEH). This is one of the...

What happens when a Cyber Security analyst is sent a phishing text?

This blog post is my first post on the topic of Phishing where I try to analyse an SMS Phishing text, not in great technical detail but...

Malicious office macro analysis

In this blog post, we will creating a malicious macro that allows us to catch a reverse shell when a word document is opened. We will...

Exploit development BOF

Buffer Overflow This blog post is my attempt in trying to explain how to perform a buffer overflow in preparation for the OSCP. I have...

How to get started in Cyber Security 2021

The Information Security industry is booming and there hasn't been a better time to enter! Although prior cyber security experience isn't...