Lab of a Penetration Tester

I have been playing with  Microsoft Advanced Threat Analytics (ATA)  for past few months. I found it useful for Blue Teams and scary as a ...

UPDATE (November 2021) - After more than 4 years, Microsoft has acknowledged this is as a vulnerability and released a patch. This is now...

Recently I started playing with the awesome PowerUpSQL tool by guys at NetSPI . I was interested in the ability to attack an Active D...

I was playing with Windows Hosted Network feature couple of days back. A hopefully useful idea which came to my mind was using the name of...

Update (23-Dec-2016) - I have implemented the publicly known AMSI bypasses described in this post in a PowerShell script Invoke-AmsiBypass ...