Blog Posts

Exploiting log4j | Apache Solr

Log4j is a popular Java library maintained by the Apache foundation used as a logging framework for Java. Around Friday 10th December...

How to use Hydra to brute force login forms.

Hydra is a very powerful and fast password cracking tool which can also perform dictionary attacks against a wide range of protocols such...

2,092 views0 comments

Exploiting log4j | Apache Solr

Log4j is a popular Java library maintained by the Apache foundation used as a logging framework for Java. Around Friday 10th December...

3,863 views0 comments

Enumerating Active Directory using BloodHound.

90% of the Global Fortune 1000 companies use Active Directory as their primary method of authentication and authorization. This plays a...

Exploiting EternalBlue | MS17-010

In this blog we will be walking though a machine from the Cybermentors course; Practical Ethical Hacking (PEH). The main lesson from this...

Golden Ticket attacks

Once we have compromised a Domain Controller we want to gain a level of persistence on the domain. We can do this by crafting Golden-Tickets

Attacktive Directory

This will be my first of many Active Directory themed blogs focused around exploitation. I have recently been exposed to a lot of Active...