Internal Testing

Internal Testing Resources

Internal Testing

Latest Internal Testing Resources

Another Log4j on the fire: Unifi
Dec 28, 2021 Nicholas Anastasi

Another Log4j on the fire: Unifi

By now, you’re probably well aware of a recently disclosed vulnerability for the Java logging library, Log4j. The vulnerability is wide-reaching and affects Ubiquiti's Unifi Network Application. In this article, we’re going to break down the exploitation process and touch on some post-exploitation methods for leveraging access to the underlying operating system.
How to exploit Log4j vulnerabilities in VMWare vCenter
Dec 21, 2021 Nicholas Anastasi

How to exploit Log4j vulnerabilities in VMWare vCenter

A vulnerability was recently disclosed for the Java logging library, Log4j. The vulnerability is wide-reaching and affects both open source projects and enterprise software, meaning we need to understand how to ID and remediate it in our network environments. Shortly after the issue was disclosed, VMWare announced that several of their products were affected. A Proof of Concept has been released...
The ultimate tag team: PetitPotam and ADCS pwnage from Linux
Aug 10, 2021 Nicholas Anastasi

The ultimate tag team: PetitPotam and ADCS pwnage from Linux

PetitPotam and ADCS exploitation are nothing short of amazing. Exploitation is a breeze and results in full domain admin access. With these two TTPs, an attacker can hop on a network, exploit the vulnerability, do some command-line magic and have local administrator privileges on a domain controller in under 15 minutes. So far, no one has detailed the exploitation process fully...
#PrintNightmare: Print Spooler Vulnerability Check
Aug 06, 2021 Nate Fair

#PrintNightmare: Print Spooler Vulnerability Check

Hey, you love printers right? They’re that reliable, steadfast piece of technology that always seems to work and never gives you any headaches ... right? Well, buckle up. Microsoft is releasing emergency security patches to address a critical privilege escalation and remote code execution vulnerability found within the Print Spooler service.
Fix Cleartext Password Issues in Your Organization
Jul 21, 2021 Nicholas Anastasi

Fix Cleartext Password Issues in Your Organization

The key to our engagements often and unfortunately involve the discovery of credentials on internal network file shares. We’re going to show you how we find cleartext password storage problems and how to address them.
Discovering Active Directory Controllers in your Client Network
Oct 30, 2020 Nicholas Anastasi

Discovering Active Directory Controllers in your Client Network

After initially accessing an internal network during a penetration test, you need to find out what the Active Directory (AD) infrastructure looks like. Here, we’re going to examine methods for this process from both Windows and Linux, so you have an approach in your back pocket that fits your needs.
1 2 3 »