Blog

TLS fingerprint is a technique which bases on the specific set of information that is advertised in the "Hello" message. In practice, it's just 4th packet (but not necessarily) after 3-way handshake connection. However, it is sent by the client as the first message in the TLS handshake process.

Read now

As red teamers, we have plenty, different DNS-based exfiltration/tunneling/ C2 / payload delivery techniques to choose. I went through many available tools and found that most of them rely on DNS query types from the list below:
- A
- AAAA
- SOA
- TXT
- NULL
- MX
- CNAME

So what about DNS AXFR?

Read more

The "In & Out: Network Data Exfiltration Techniques" training has been officially accepted @ HiTB AMS 2019. The registration is still open.
We are going to have a very intensive 2-day training session about post exploitation adversary simulations and network data exfiltration techniques.

Check out the list of available lab scenarios based on my security assessment experience:

Read now

FreeIPA is an Linux / Open Source alternative to Microsoft Active Directory solution. I like to call it as 'Linux Domain Controller'. It's great solution for Linux server environments where you are looking for a centralized authentication, Kerberos Single-Sign-On or any other built-in network functionality from the list:

- DNS
- Kerberos
- LDAP
- NTP
- PKI
- HBAC - Host Based Access Control
- Domain Trusts
- HTTP server for hosting web management panel and API

Read more