Lab of a Penetration Tester

I recently spoke at DEF CON 27 on abusing Security Descriptors and ACLs i.e. permissions on Windows machines.  You can find the sl...

I did a super interesting AD security assessment for a client recently. They are re-deploying their infrastructure and upgrading their for...

This is a quick post to make notes of something which I have been using and teaching for sometime. We can use Micorosft's PowerShell ...

Deception has always been of interest to me. As a student of military history, I have always been fascinated by its implementation in warfar...