Defensive Security Archives

Posts related to our team research on various defensive security works available from multitude of resources.

Abusing CVE-2022-26923 through SOCKS5 on a Mythic C2 agent
Gallery
Abusing CVE-2022-26923 through SOCKS5 on a Mythic C2 agent

Defensive Security, Offensive Security, Penetration Testing, Red Teaming

Abusing CVE-2022-26923 through SOCKS5 on a Mythic C2 agent

ABUSING CVE-2022-26923 THROUGH SOCKS5 ON A MYTHIC C2 AGENT This blog post was written by Amarjit Labhuram CVE-2022-29623 Vulnerability Introduction Vulnerability Type: Elevation of Privilege Vulnerability Component: Active Directory Certificate Services (AD CS) An attacker/user that has the ability to create a machine account and tamper with [...]

By Amarjit Labhuram|2022-06-01T12:52:41+03:00June 1st, 2022|Defensive Security, Offensive Security, Penetration Testing, Red Teaming|

The Auror Project – Challenge 1 [Setting the lab up automatically]
Gallery
The Auror Project – Challenge 1 [Setting the lab up automatically]

Defensive Security, Offensive Security, Penetration Testing, Red Teaming

The Auror Project – Challenge 1 [Setting the lab up automatically]

THE AUROR PROJECT - CHALLENGE 1 [SETTING THE LAB UP AUTOMATICALLY] This blog post was written by Amarjit Labhuram Introduction In The Auror Project launched a course called the 3 machines lab - Active Directory series and if you know me by know you know I am [...]

By Amarjit Labhuram|2022-06-01T11:18:02+03:00April 26th, 2022|Defensive Security, Offensive Security, Penetration Testing, Red Teaming|

Using Elastalert to alert via email when Mimikatz is run.
Gallery
Using Elastalert to alert via email when Mimikatz is run.

Defensive Security, Offensive Security, Penetration Testing, Red Teaming

Using Elastalert to alert via email when Mimikatz is run.

USING ELASTALERT TO ALERT VIA EMAIL WHEN MIMIKATZ IS RUN. This blog post was written by Dharmik Karania Introduction In this blog, I shall discuss how an alert can be sent via email when Mimikatz is run. Mimikatz is a post-exploitation tool that is used to dump [...]

By Dharmik Karania|2022-04-26T14:55:16+03:00November 17th, 2021|Defensive Security, Offensive Security, Penetration Testing, Red Teaming|