Build an IOS pentesting lab via XCode Simulator
This blog is written by our student Pranav Sharma. Doing an iPhone pen-testing can be a tedious task in itself […]
Kerberoasting Simplified
Introduction As Kerberos is an authentication protocol it is possible to perform brute-force attacks against it (providing we are careful). […]
Kerberoasting initial: AS-REP Roasting
Introduction AS-REP roasting is an attack that is often-overlooked in my opinion it is not extremely common as you have to […]
Herpaderping process– Evading Windows Defender Security
Evading windows defender security is always an interesting topic for information security professionals. When designing products for securing Windows platforms, […]
Powershell Restrictions bypasses
In most mature environments and in most of these tests, access to command line tools is restricted. Employees typically cannot […]
Decrypting IOS apps Essentials
Frida way:- Step 1: Install Frida on the system (Mac/Windows) and iPhone I’m using my Linux pentesting box and installed Frida using #pip […]
Mysql UDF Basics and Exploitation
So what is a UDF? It is a way to extend MySQL with a new function that works like a […]
The art of file uploading :- pro level
I have recently published a blog post on use of .XAMLX files to execute command on an IIS based application. […]
Creating Rooted AVD in Android Studio
For a security enthusiast, a rooted android device is essential to perform dynamic assessments of android applications. They either rely […]
Insecure Data storage Analysis of iOS Applications
One might think that we are done with the static analysis of the application, but it is not so. We […]