Penetration Testing

6 posts tagged “Penetration Testing”.

Dec 10, 2023·5 min read

Bypassing UAC through msconfig

Use msconfig's auto-elevation to get a high-integrity shell without triggering a UAC prompt.

• Penetration Testing
• Ethical Hacking
• UAC
• Windows

Dec 3, 2023·3 min read

Executing Shellcode in Remote Process

A walkthrough of classic shellcode injection with OpenProcess, VirtualAllocEx, WriteProcessMemory, and CreateRemoteThread.

• Red Teaming
• Penetration Testing
• Malware
• Malware Development

Nov 26, 2023·2 min read

Windows persistence through backdoor services

Create and disguise a malicious Windows service to keep access across reboots.

• Persistence
• Windows
• Penetration Testing
• Red Teaming

Nov 19, 2023·2 min read

Windows Persistence through shortcut files

Hijack a shortcut file so a user's click quietly launches a backdoor first.

• Red Team Exercises
• Persistence
• Malware
• Windows Persistence

Sep 17, 2023·5 min read

SSH Port Forwarding

Local, remote, and dynamic SSH tunnels explained with practical pivoting examples.

• SSH Tunnel
• Pivoting
• Red Teaming
• Penetration Testing

Sep 17, 2023·5 min read

Kerberoasting

Request service tickets for accounts with SPNs and crack their passwords offline — a classic Active Directory attack.

• Active Directory
• Post Exploitation
• Penetration Testing
• Kerberoasting