Blog

As red teamers, we have plenty, different DNS-based exfiltration/tunneling/ C2 / payload delivery techniques to choose. I went through many available tools and found that most of them rely on DNS query types from the list below:
- A
- AAAA
- SOA
- TXT
- NULL
- MX
- CNAME

So what about DNS AXFR?

Read more

The "In & Out: Network Data Exfiltration Techniques" training has been officially accepted @ HiTB AMS 2019. The registration is still open.
We are going to have a very intensive 2-day training session about post exploitation adversary simulations and network data exfiltration techniques.

Check out the list of available lab scenarios based on my security assessment experience:

Read now

FreeIPA is an Linux / Open Source alternative to Microsoft Active Directory solution. I like to call it as 'Linux Domain Controller'. It's great solution for Linux server environments where you are looking for a centralized authentication, Kerberos Single-Sign-On or any other built-in network functionality from the list:

- DNS
- Kerberos
- LDAP
- NTP
- PKI
- HBAC - Host Based Access Control
- Domain Trusts
- HTTP server for hosting web management panel and API

Read more

Step by step for running LKRG protection against suterusu LKM rootkit targeting updated CentOS 7.
If you want to learn more about the project, how things work, etc. I strongly suggest subscribing to the project's mailing list.

Read now