In this article, we will bypass Windows Defender (the latest version), explaining each step in detail. Requirements Windows 10 machine (Victim) Low-level privilege account compromised on Victim Linux machine (Attacker) Defender Anti-Virus running & up-to-date at the moment of publishing this article Payloads Used Payload Runner: [Ref].Assembly.GetType('System.Management.Automation.Amsi'+[char]85+'tils').GetField('ams'+[char]105+'InitFailed','NonPublic,Static').SetValue($null,$true)

In this article, we will discuss how you can bypass Multi-Factor Authentication (MFA) in a Phishing attack, to takeover accounts. Pre-requirements A good domain to be used. You can also take a look over the repository I’ve put together with some available domains that you can purchase and use for your…

In this article, we will discuss BadUSB, how to program it, and some offensive tricks of delivering it. What is BadUSB? It’s a bird? No It’s a plane? No It’s a USB? Maybe… It’s a Mouse? Somehow… It’s a Keyboard? Commonly yes…Wait what? Basically, the BadUSB is an Arduino-backed device that can interpret…

In this article, we will discuss the HTML Injection vulnerability, and 3 methods of how to creatively leverage it for exploitation. Firstly, let’s have an overview of HTML Injection. What is HTML Injection? Before starting to go into details, I want to clarify that HTML Injection is not Cross-Site Scripting (XSS). …

This exam makes OSCP seem ridiculously easy. What is OSEP? If you are looking for the official details, then you can take a look over the Offensive Security page here: https://help.offensive-security.com/hc/en-us/articles/360050293792-OSEP-Exam-Guide Basically, OSEP is an exam that simulates a real environment that you have to compromise, from an external unauthenticated starting point. It’s…

In this article, we will discuss the Subdomain Takeover attack, and present 25 disclosed reports based on this flaw. What is a Subdomain Takeover Vulnerability? Theoretically, a Subdomain Takeover flaw is when an attacker can hijack the subdomain of a company, and control what content is being displayed when the users are navigating to that one. …

In this article, we will discuss some of my favorite OSINT techniques that can help during your penetration testing activities. What is OSINT? OSINT stands for “Open Source Intelligence”, and as the name suggests, it is a collection of techniques used to find security flaws in publicly-available information about an organization. This can…

In this article, we will discuss the Server-Side Request Forgery (SSRF) vulnerability, and present 25 disclosed reports based on this flaw. What is Server-Side Request Forgery? SSRF is when you, as an attacker, successfully make the application triggering arbitrary requests. Server-Side Request Forgery (SSRF) is basically correlated with other vulnerabilities a lot of times, for…

In this article, we will discuss about one of the toughest exams from Offensive Security, the web expert one (OSWE). Mindset If the mindset for OSCP is “Try harder!”, then the mindset for OSWE would be something like “Try harder, but harder than ever!”. If you thought that OSCP contains a…