Extracting NTLM Hashes With User Privileges
Extracting NTLM hashes without the need for Mimikatz.
Offensive Security Experienced Penetration Tester (OSEP) Review
A review of the Evasion Techniques and Breaching Defences course by Offensive Security.
Dealing with Small Buffer Space
Using relative JMP instructions to escape small buffers.
Blocking Outbound Docker Traffic
Blocking outbound docker traffic using an IPTables firewall.
NTLM Relay Attacks
Performing NTLM relay attacks using SMB and LDAP.
64-Bit NX Bypass
Bypassing NX on 64-bit Linux.
Bypassing DEP & ASLR in Linux
Bypassing DEP & ASLR using pointer leakage and return orientated programming.