41554 blogs · [ { "id": "01a087bf-3845-72e0-8b0e-0b6570bd8a9d", "title": "Web Browser Stored Credentials", "url": "https://pentestlab.blog/2024/08/20/web-browser-stored-credentials/", "published_at": "2024-08-20T07:00:00+00:00" }, { "id": "01a087bf-3846-70ab-b9bb-6d05f50e2de8", "title": "Persistence – DLL Proxy Loading", "url": "https://pentestlab.blog/2024/04/03/persistence-dll-proxy-loading/", "published_at": "2024-04-03T06:57:00+00:00" }, { "id": "01a087bf-3846-70ab-b9bb-6d05f5e7e2f8", "title": "Persistence – Explorer", "url": "https://pentestlab.blog/2024/03/05/persistence-explorer/", "published_at": "2024-03-05T07:54:00+00:00" }, { "id": "01a087bf-3846-70ab-b9bb-6d05f66a8bd5", "title": "Persistence – Visual Studio Code Extensions", "url": "https://pentestlab.blog/2024/03/04/persistence-visual-studio-code-extensions/", "published_at": "2024-03-04T06:19:00+00:00" }, { "id": "01a087bf-3846-70ab-b9bb-6d05f6891c2e", "title": "AS-REP Roasting", "url": "https://pentestlab.blog/2024/02/20/as-rep-roasting/", "published_at": "2024-02-20T07:25:00+00:00" }, { "id": "01a087bf-3846-70ab-b9bb-6d05f71a3a7b", "title": "Persistence – Windows Setup Script", "url": "https://pentestlab.blog/2024/02/05/persistence-windows-setup-script/", "published_at": "2024-02-05T05:53:00+00:00" }, { "id": "01a087bf-3846-70ab-b9bb-6d05f7995867", "title": "Persistence – Disk Clean-up", "url": "https://pentestlab.blog/2024/01/29/persistence-disk-clean-up/", "published_at": "2024-01-29T05:59:00+00:00" }, { "id": "01a087bf-3846-70ab-b9bb-6d05f8958b78", "title": "Domain Escalation – Backup Operator", "url": "https://pentestlab.blog/2024/01/22/domain-escalation-backup-operator/", "published_at": "2024-01-22T07:15:00+00:00" }, { "id": "01a087bf-3846-70ab-b9bb-6d05f8e570a7", "title": "Lateral Movement – Visual Studio DTE", "url": "https://pentestlab.blog/2024/01/15/lateral-movement-visual-studio-dte/", "published_at": "2024-01-15T07:09:00+00:00" }, { "id": "01a087bf-3846-70ab-b9bb-6d05f90d26e2", "title": "Persistence – Event Log", "url": "https://pentestlab.blog/2024/01/08/persistence-event-log/", "published_at": "2024-01-08T07:21:00+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d0a656cf", "title": "Initial Access – search-ms URI Handler", "url": "https://pentestlab.blog/2024/01/02/initial-access-search-ms-uri-handler/", "published_at": "2024-01-02T07:08:00+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d0ef2cc8", "title": "Persistence – Scheduled Task Tampering", "url": "https://pentestlab.blog/2023/11/20/persistence-scheduled-task-tampering/", "published_at": "2023-11-20T09:14:00+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d1a0819a", "title": "Persistence – Windows Telemetry", "url": "https://pentestlab.blog/2023/11/06/persistence-windows-telemetry/", "published_at": "2023-11-06T07:18:00+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d1b774a7", "title": "Persistence – Service Control Manager", "url": "https://pentestlab.blog/2023/03/20/persistence-service-control-manager/", "published_at": "2023-03-20T15:53:46+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d1dfeabf", "title": "Persistence – Context Menu", "url": "https://pentestlab.blog/2023/03/13/persistence-context-menu/", "published_at": "2023-03-13T15:19:43+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d1fcd2f0", "title": "Persistence – Event Log Online Help", "url": "https://pentestlab.blog/2023/03/07/persistence-event-log-online-help/", "published_at": "2023-03-07T10:45:51+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d23f46ed", "title": "Unconstrained Delegation", "url": "https://pentestlab.blog/2022/03/21/unconstrained-delegation/", "published_at": "2022-03-21T16:57:32+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d27e1656", "title": "Persistence – Notepad++ Plugins", "url": "https://pentestlab.blog/2022/02/14/persistence-notepad-plugins/", "published_at": "2022-02-14T11:46:00+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d2d5b9bc", "title": "Shadow Credentials", "url": "https://pentestlab.blog/2022/02/07/shadow-credentials/", "published_at": "2022-02-07T10:55:00+00:00" }, { "id": "01a0bdcd-18d3-70bb-9323-f0c9d389c4cc", "title": "Domain Escalation – Machine Accounts", "url": "https://pentestlab.blog/2022/02/01/machine-accounts/", "published_at": "2022-02-01T11:54:00+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a1baa6bba", "title": "Domain Persistence – Machine Account", "url": "https://pentestlab.blog/2022/01/17/domain-persistence-machine-account/", "published_at": "2022-01-17T11:25:15+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a1c9481f5", "title": "Domain Escalation – sAMAccountName Spoofing", "url": "https://pentestlab.blog/2022/01/10/domain-escalation-samaccountname-spoofing/", "published_at": "2022-01-10T11:11:00+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a1cc6a321", "title": "Domain Persistence – AdminSDHolder", "url": "https://pentestlab.blog/2022/01/04/domain-persistence-adminsdholder/", "published_at": "2022-01-04T12:33:00+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a1d75b353", "title": "Golden Certificate", "url": "https://pentestlab.blog/2021/11/15/golden-certificate/", "published_at": "2021-11-15T12:12:51+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a1e34ad88", "title": "Lateral Movement – WebClient", "url": "https://pentestlab.blog/2021/10/20/lateral-movement-webclient/", "published_at": "2021-10-20T08:03:10+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a1e5d1242", "title": "Resource Based Constrained Delegation", "url": "https://pentestlab.blog/2021/10/18/resource-based-constrained-delegation/", "published_at": "2021-10-18T08:15:00+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a1e8a0bbf", "title": "PetitPotam – NTLM Relay to AD CS", "url": "https://pentestlab.blog/2021/09/14/petitpotam-ntlm-relay-to-ad-cs/", "published_at": "2021-09-14T21:00:00+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a1f0b6fc0", "title": "Account Persistence – Certificates", "url": "https://pentestlab.blog/2021/09/13/account-persistence-certificates/", "published_at": "2021-09-13T18:35:00+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a1ffb7762", "title": "Domain Escalation – PrintNightmare", "url": "https://pentestlab.blog/2021/08/17/domain-escalation-printnightmare/", "published_at": "2021-08-17T06:25:00+00:00" }, { "id": "01a0bdd2-730e-7278-8123-f86a20d48645", "title": "HiveNightmare", "url": "https://pentestlab.blog/2021/08/16/hivenightmare/", "published_at": "2021-08-16T06:33:00+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88cff28edc", "title": "Universal Privilege Escalation and Persistence – Printer", "url": "https://pentestlab.blog/2021/08/02/universal-privilege-escalation-and-persistence-printer/", "published_at": "2021-08-02T06:35:25+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88d06e52f1", "title": "Dumping RDP Credentials", "url": "https://pentestlab.blog/2021/05/24/dumping-rdp-credentials/", "published_at": "2021-05-24T11:45:02+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88d0e40814", "title": "Persistence – AMSI", "url": "https://pentestlab.blog/2021/05/17/persistence-amsi/", "published_at": "2021-05-17T07:53:08+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88d0f79703", "title": "Remote Potato – From Domain User to Enterprise Admin", "url": "https://pentestlab.blog/2021/05/04/remote-potato-from-domain-user-to-enterprise-admin/", "published_at": "2021-05-04T07:27:16+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88d1f3ed80", "title": "PlexTrac – A Platform for Purple Teaming", "url": "https://pentestlab.blog/2021/03/30/plextrac-a-platform-for-purple-teaming/", "published_at": "2021-03-30T17:12:13+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88d20b8e9d", "title": "Lateral Movement – Services", "url": "https://pentestlab.blog/2020/07/21/lateral-movement-services/", "published_at": "2020-07-21T17:25:41+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88d2523805", "title": "Indirect Command Execution", "url": "https://pentestlab.blog/2020/07/06/indirect-command-execution/", "published_at": "2020-07-06T17:52:54+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88d341b731", "title": "Spyse – A Cyber Security Search Engine", "url": "https://pentestlab.blog/2020/06/15/spyse-a-cyber-security-search-engine/", "published_at": "2020-06-15T20:05:46+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88d36b9e6a", "title": "Persistence – COM Hijacking", "url": "https://pentestlab.blog/2020/05/20/persistence-com-hijacking/", "published_at": "2020-05-20T11:50:22+00:00" }, { "id": "01a0bdd6-0afd-71a4-903d-fe88d3bebc98", "title": "Persistence – DLL Hijacking", "url": "https://pentestlab.blog/2020/03/04/persistence-dll-hijacking/", "published_at": "2020-03-04T13:01:34+00:00" }, { "id": "01a0bdda-5608-7161-a61c-dbc185c51185", "title": "Phishing Windows Credentials", "url": "https://pentestlab.blog/2020/03/02/phishing-windows-credentials/", "published_at": "2020-03-02T10:15:00+00:00" }, { "id": "01a0bdda-5609-710c-833a-5089571994fc", "title": "Parent PID Spoofing", "url": "https://pentestlab.blog/2020/02/24/parent-pid-spoofing/", "published_at": "2020-02-24T09:58:00+00:00" }, { "id": "01a0bdda-5609-710c-833a-508957bcb597", "title": "Persistence – RID Hijacking", "url": "https://pentestlab.blog/2020/02/12/persistence-rid-hijacking/", "published_at": "2020-02-12T09:44:00+00:00" }, { "id": "01a0bdda-5609-710c-833a-508958b480b4", "title": "Credential Access – Password Filter DLL", "url": "https://pentestlab.blog/2020/02/10/credential-access-password-filter-dll/", "published_at": "2020-02-10T09:19:00+00:00" }, { "id": "01a0bdda-5609-710c-833a-5089593e3216", "title": "Persistence – WaitFor", "url": "https://pentestlab.blog/2020/02/04/persistence-waitfor/", "published_at": "2020-02-04T09:54:00+00:00" }, { "id": "01a0bdda-5609-710c-833a-50895a1497a9", "title": "Persistence – Modify Existing Service", "url": "https://pentestlab.blog/2020/01/22/persistence-modify-existing-service/", "published_at": "2020-01-22T11:12:00+00:00" }, { "id": "01a0bdda-5609-710c-833a-50895abf17d5", "title": "Persistence – WMI Event Subscription", "url": "https://pentestlab.blog/2020/01/21/persistence-wmi-event-subscription/", "published_at": "2020-01-21T09:00:00+00:00" }, { "id": "01a0bdda-5609-710c-833a-50895b7ec1ab", "title": "Persistence – Winlogon Helper DLL", "url": "https://pentestlab.blog/2020/01/14/persistence-winlogon-helper-dll/", "published_at": "2020-01-14T09:58:00+00:00" }, { "id": "01a0bdda-5609-710c-833a-50895c6c560c", "title": "Persistence – Image File Execution Options Injection", "url": "https://pentestlab.blog/2020/01/13/persistence-image-file-execution-options-injection/", "published_at": "2020-01-13T08:04:00+00:00" }, { "id": "01a0bdda-5609-710c-833a-50895d0eb525", "title": "Persistence – AppInit DLLs", "url": "https://pentestlab.blog/2020/01/07/persistence-appinit-dlls/", "published_at": "2020-01-07T09:39:00+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25f5dd6414", "title": "Persistence – Change Default File Association", "url": "https://pentestlab.blog/2020/01/06/persistence-change-default-file-association/", "published_at": "2020-01-06T09:38:00+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25f6142995", "title": "Persistence – Application Shimming", "url": "https://pentestlab.blog/2019/12/16/persistence-application-shimming/", "published_at": "2019-12-16T09:37:00+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25f6895b31", "title": "Persistence – Office Application Startup", "url": "https://pentestlab.blog/2019/12/11/persistence-office-application-startup/", "published_at": "2019-12-11T10:01:00+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25f72e8d35", "title": "Persistence – Accessibility Features", "url": "https://pentestlab.blog/2019/11/13/persistence-accessibility-features/", "published_at": "2019-11-13T13:29:00+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25f7dddd66", "title": "Persistence – PowerShell Profile", "url": "https://pentestlab.blog/2019/11/05/persistence-powershell-profile/", "published_at": "2019-11-05T13:06:44+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25f83e6a4f", "title": "Persistence – Scheduled Tasks", "url": "https://pentestlab.blog/2019/11/04/persistence-scheduled-tasks/", "published_at": "2019-11-04T14:01:35+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25f8c94cd6", "title": "Persistence – BITS Jobs", "url": "https://pentestlab.blog/2019/10/30/persistence-bits-jobs/", "published_at": "2019-10-30T09:20:00+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25f8ee29ab", "title": "Persistence – Netsh Helper DLL", "url": "https://pentestlab.blog/2019/10/29/persistence-netsh-helper-dll/", "published_at": "2019-10-29T09:48:00+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25f98b0403", "title": "Persistence – Port Monitors", "url": "https://pentestlab.blog/2019/10/28/persistence-port-monitors/", "published_at": "2019-10-28T09:28:00+00:00" }, { "id": "01a0bddd-48b2-70ce-8c36-dd25fa0f04a7", "title": "Persistence – Time Providers", "url": "https://pentestlab.blog/2019/10/22/persistence-time-providers/", "published_at": "2019-10-22T14:25:12+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f266d89f06", "title": "Persistence – Security Support Provider", "url": "https://pentestlab.blog/2019/10/21/persistence-security-support-provider/", "published_at": "2019-10-21T16:43:16+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f2676e49ba", "title": "Persistence – Screensaver", "url": "https://pentestlab.blog/2019/10/09/persistence-screensaver/", "published_at": "2019-10-09T09:11:00+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f26845a9e3", "title": "Persistence – Shortcut Modification", "url": "https://pentestlab.blog/2019/10/08/persistence-shortcut-modification/", "published_at": "2019-10-08T08:25:00+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f268dd22d2", "title": "Persistence – New Service", "url": "https://pentestlab.blog/2019/10/07/persistence-new-service/", "published_at": "2019-10-07T08:11:00+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f269aba717", "title": "Persistence – Registry Run Keys", "url": "https://pentestlab.blog/2019/10/01/persistence-registry-run-keys/", "published_at": "2019-10-01T08:46:00+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f26a4b575c", "title": "Microsoft Exchange – Privilege Escalation", "url": "https://pentestlab.blog/2019/09/16/microsoft-exchange-privilege-escalation/", "published_at": "2019-09-16T07:41:00+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f26a7b4358", "title": "Microsoft Exchange – ACL", "url": "https://pentestlab.blog/2019/09/12/microsoft-exchange-acl/", "published_at": "2019-09-12T09:12:00+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f26b5b17a9", "title": "Microsoft Exchange – Mailbox Post Compromise", "url": "https://pentestlab.blog/2019/09/11/microsoft-exchange-mailbox-post-compromise/", "published_at": "2019-09-11T11:00:00+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f26be26111", "title": "Microsoft Exchange – Code Execution", "url": "https://pentestlab.blog/2019/09/10/microsoft-exchange-code-execution/", "published_at": "2019-09-10T10:30:00+00:00" }, { "id": "01a0bde0-0564-71c9-a29b-30f26c090fff", "title": "Microsoft Exchange – NTLM Relay", "url": "https://pentestlab.blog/2019/09/09/microsoft-exchange-ntlm-relay/", "published_at": "2019-09-09T07:41:00+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c41cb81bb9", "title": "Microsoft Exchange – Password Spraying", "url": "https://pentestlab.blog/2019/09/05/microsoft-exchange-password-spraying/", "published_at": "2019-09-05T12:51:18+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c41d5d2437", "title": "Microsoft Exchange – Domain Escalation", "url": "https://pentestlab.blog/2019/09/04/microsoft-exchange-domain-escalation/", "published_at": "2019-09-04T10:43:34+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c41df1b8ba", "title": "Dumping Domain Password Hashes", "url": "https://pentestlab.blog/2018/07/04/dumping-domain-password-hashes/", "published_at": "2018-07-04T05:56:55+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c41ec38e7e", "title": "Kerberoast", "url": "https://pentestlab.blog/2018/06/12/kerberoast/", "published_at": "2018-06-12T05:30:27+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c41f52fe3a", "title": "Command and Control – Browser", "url": "https://pentestlab.blog/2018/06/06/command-and-control-browser/", "published_at": "2018-06-06T06:39:20+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c41f9f25a7", "title": "SPN Discovery", "url": "https://pentestlab.blog/2018/06/04/spn-discovery/", "published_at": "2018-06-04T07:00:33+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c42032bab4", "title": "Situational Awareness", "url": "https://pentestlab.blog/2018/05/28/situational-awareness/", "published_at": "2018-05-28T06:21:48+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c42035d784", "title": "Lateral Movement – WinRM", "url": "https://pentestlab.blog/2018/05/15/lateral-movement-winrm/", "published_at": "2018-05-15T13:18:15+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c420acab4e", "title": "AppLocker Bypass – CMSTP", "url": "https://pentestlab.blog/2018/05/10/applocker-bypass-cmstp/", "published_at": "2018-05-10T07:01:49+00:00" }, { "id": "01a0bde2-7fbd-7207-a665-b1c4217d55cc", "title": "PDF – NTLM Hashes", "url": "https://pentestlab.blog/2018/05/09/pdf-ntlm-hashes/", "published_at": "2018-05-09T07:30:35+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a6903cbabc", "title": "NBNS Spoofing", "url": "https://pentestlab.blog/2018/05/08/nbns-spoofing/", "published_at": "2018-05-08T06:00:53+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a690a95490", "title": "Lateral Movement – RDP", "url": "https://pentestlab.blog/2018/04/24/lateral-movement-rdp/", "published_at": "2018-04-24T06:34:33+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a690f87c79", "title": "DCShadow", "url": "https://pentestlab.blog/2018/04/16/dcshadow/", "published_at": "2018-04-16T07:30:44+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a6916ffa05", "title": "Skeleton Key", "url": "https://pentestlab.blog/2018/04/10/skeleton-key/", "published_at": "2018-04-10T07:45:17+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a69216c8c5", "title": "Golden Ticket", "url": "https://pentestlab.blog/2018/04/09/golden-ticket/", "published_at": "2018-04-09T07:42:17+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a69295e965", "title": "Dumping Clear-Text Credentials", "url": "https://pentestlab.blog/2018/04/04/dumping-clear-text-credentials/", "published_at": "2018-04-04T07:00:20+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a6931c977a", "title": "Microsoft Office – DDE Attacks", "url": "https://pentestlab.blog/2018/01/16/microsoft-office-dde-attacks/", "published_at": "2018-01-16T03:00:23+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a693e87c27", "title": "Command and Control – JavaScript", "url": "https://pentestlab.blog/2018/01/08/command-and-control-javascript/", "published_at": "2018-01-08T04:39:23+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a6942aac72", "title": "Command and Control – Web Interface", "url": "https://pentestlab.blog/2018/01/03/command-and-control-web-interface/", "published_at": "2018-01-03T06:47:44+00:00" }, { "id": "01a0bde4-e436-7090-8b24-68a694773492", "title": "Command and Control – Images", "url": "https://pentestlab.blog/2018/01/02/command-and-control-images/", "published_at": "2018-01-02T05:22:23+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f5ca9256", "title": "Microsoft Office – NTLM Hashes via Frameset", "url": "https://pentestlab.blog/2017/12/18/microsoft-office-ntlm-hashes-via-frameset/", "published_at": "2017-12-18T11:41:24+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f65165e8", "title": "Microsoft Office – Payloads in Document Properties", "url": "https://pentestlab.blog/2017/12/15/microsoft-office-payloads-in-document-properties/", "published_at": "2017-12-15T13:50:05+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f69aba40", "title": "SMB Share – SCF File Attacks", "url": "https://pentestlab.blog/2017/12/13/smb-share-scf-file-attacks/", "published_at": "2017-12-13T10:34:13+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f6b5bc7c", "title": "Command and Control – WebSocket", "url": "https://pentestlab.blog/2017/12/06/command-and-control-websocket/", "published_at": "2017-12-06T18:00:47+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f75a2062", "title": "Command and Control – WMI", "url": "https://pentestlab.blog/2017/11/20/command-and-control-wmi/", "published_at": "2017-11-20T15:52:55+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f75eb66f", "title": "Command and Control – Website", "url": "https://pentestlab.blog/2017/11/14/command-and-control-website/", "published_at": "2017-11-14T16:01:00+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f7db562a", "title": "Hijack Digital Signatures – PowerShell Script", "url": "https://pentestlab.blog/2017/11/08/hijack-digital-signatures-powershell-script/", "published_at": "2017-11-08T06:37:46+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f87b8551", "title": "Hijacking Digital Signatures", "url": "https://pentestlab.blog/2017/11/06/hijacking-digital-signatures/", "published_at": "2017-11-06T11:39:27+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f8b15caa", "title": "Command and Control – HTTPS", "url": "https://pentestlab.blog/2017/10/04/command-and-control-https/", "published_at": "2017-10-04T04:00:40+00:00" }, { "id": "01a0bde7-676c-73ec-8a1d-ce49f90c9985", "title": "Command and Control – Kernel", "url": "https://pentestlab.blog/2017/10/02/command-and-control-kernel/", "published_at": "2017-10-02T04:00:04+00:00" } ] posts Claim your blog

Back to pentestlab.blog

Blog · corpus.blog/blogs/pentestlab.blog/posts

pentestlab.blog

pentestlab.blog

2024

Web Browser Stored Credentials original ↗

20 Aug 2024

Persistence – DLL Proxy Loading original ↗

3 Apr 2024

Persistence – Explorer original ↗

5 Mar 2024

Persistence – Visual Studio Code Extensions original ↗

4 Mar 2024

AS-REP Roasting original ↗

20 Feb 2024

Persistence – Windows Setup Script original ↗

5 Feb 2024

Persistence – Disk Clean-up original ↗

29 Jan 2024

Domain Escalation – Backup Operator original ↗

22 Jan 2024

Lateral Movement – Visual Studio DTE original ↗

15 Jan 2024

Persistence – Event Log original ↗

8 Jan 2024

Initial Access – search-ms URI Handler original ↗

2 Jan 2024

2023

Persistence – Scheduled Task Tampering original ↗

20 Nov 2023

Persistence – Windows Telemetry original ↗

6 Nov 2023

Persistence – Service Control Manager original ↗

20 Mar 2023

Persistence – Context Menu original ↗

13 Mar 2023

Persistence – Event Log Online Help original ↗

7 Mar 2023

2022

Unconstrained Delegation original ↗

21 Mar 2022

Persistence – Notepad++ Plugins original ↗

14 Feb 2022

Shadow Credentials original ↗

7 Feb 2022

Domain Escalation – Machine Accounts original ↗

1 Feb 2022

Domain Persistence – Machine Account original ↗

17 Jan 2022

Domain Escalation – sAMAccountName Spoofing original ↗

10 Jan 2022

Domain Persistence – AdminSDHolder original ↗

4 Jan 2022

2021

Golden Certificate original ↗

15 Nov 2021

Lateral Movement – WebClient original ↗

20 Oct 2021

Resource Based Constrained Delegation original ↗

18 Oct 2021

PetitPotam – NTLM Relay to AD CS original ↗

14 Sept 2021

Account Persistence – Certificates original ↗

13 Sept 2021

Domain Escalation – PrintNightmare original ↗

17 Aug 2021

HiveNightmare original ↗

16 Aug 2021

Universal Privilege Escalation and Persistence – Printer original ↗

2 Aug 2021

Dumping RDP Credentials original ↗

24 May 2021

Persistence – AMSI original ↗

17 May 2021

Remote Potato – From Domain User to Enterprise Admin original ↗

4 May 2021

PlexTrac – A Platform for Purple Teaming original ↗

30 Mar 2021

2020

Lateral Movement – Services original ↗

21 Jul 2020

Indirect Command Execution original ↗

6 Jul 2020

Spyse – A Cyber Security Search Engine original ↗

15 Jun 2020

Persistence – COM Hijacking original ↗

20 May 2020

Persistence – DLL Hijacking original ↗

4 Mar 2020

Phishing Windows Credentials original ↗

2 Mar 2020

Parent PID Spoofing original ↗

24 Feb 2020

Persistence – RID Hijacking original ↗

12 Feb 2020

Credential Access – Password Filter DLL original ↗

10 Feb 2020

Persistence – WaitFor original ↗

4 Feb 2020

Persistence – Modify Existing Service original ↗

22 Jan 2020

Persistence – WMI Event Subscription original ↗

21 Jan 2020

Persistence – Winlogon Helper DLL original ↗

14 Jan 2020

Persistence – Image File Execution Options Injection original ↗

13 Jan 2020

Persistence – AppInit DLLs original ↗

7 Jan 2020

Persistence – Change Default File Association original ↗

6 Jan 2020

2019

Persistence – Application Shimming original ↗

16 Dec 2019

Persistence – Office Application Startup original ↗

11 Dec 2019

Persistence – Accessibility Features original ↗

13 Nov 2019

Persistence – PowerShell Profile original ↗

5 Nov 2019

Persistence – Scheduled Tasks original ↗

4 Nov 2019

Persistence – BITS Jobs original ↗

30 Oct 2019

Persistence – Netsh Helper DLL original ↗

29 Oct 2019

Persistence – Port Monitors original ↗

28 Oct 2019

Persistence – Time Providers original ↗

22 Oct 2019

Persistence – Security Support Provider original ↗

21 Oct 2019

Persistence – Screensaver original ↗

9 Oct 2019

Persistence – Shortcut Modification original ↗

8 Oct 2019

Persistence – New Service original ↗

7 Oct 2019

Persistence – Registry Run Keys original ↗

1 Oct 2019

Microsoft Exchange – Privilege Escalation original ↗

16 Sept 2019

Microsoft Exchange – ACL original ↗

12 Sept 2019

Microsoft Exchange – Mailbox Post Compromise original ↗

11 Sept 2019

Microsoft Exchange – Code Execution original ↗

10 Sept 2019

Microsoft Exchange – NTLM Relay original ↗

9 Sept 2019

Microsoft Exchange – Password Spraying original ↗

5 Sept 2019

Microsoft Exchange – Domain Escalation original ↗

4 Sept 2019

2018

Dumping Domain Password Hashes original ↗

4 Jul 2018

Kerberoast original ↗

12 Jun 2018

Command and Control – Browser original ↗

6 Jun 2018

SPN Discovery original ↗

4 Jun 2018

Situational Awareness original ↗

28 May 2018

Lateral Movement – WinRM original ↗

15 May 2018

AppLocker Bypass – CMSTP original ↗

10 May 2018

PDF – NTLM Hashes original ↗

9 May 2018

NBNS Spoofing original ↗

8 May 2018

Lateral Movement – RDP original ↗

24 Apr 2018

DCShadow original ↗

16 Apr 2018

Skeleton Key original ↗

10 Apr 2018

Golden Ticket original ↗

9 Apr 2018

Dumping Clear-Text Credentials original ↗

4 Apr 2018

Microsoft Office – DDE Attacks original ↗

16 Jan 2018

Command and Control – JavaScript original ↗

8 Jan 2018

Command and Control – Web Interface original ↗

3 Jan 2018

Command and Control – Images original ↗

2 Jan 2018

2017

Microsoft Office – NTLM Hashes via Frameset original ↗

18 Dec 2017

Microsoft Office – Payloads in Document Properties original ↗

15 Dec 2017

SMB Share – SCF File Attacks original ↗

13 Dec 2017

Command and Control – WebSocket original ↗

6 Dec 2017

Command and Control – WMI original ↗

20 Nov 2017

Command and Control – Website original ↗

14 Nov 2017

Hijack Digital Signatures – PowerShell Script original ↗

8 Nov 2017

Hijacking Digital Signatures original ↗

6 Nov 2017

Command and Control – HTTPS original ↗

4 Oct 2017

Command and Control – Kernel original ↗

2 Oct 2017