sensecon 2021 – wargames edition If last year taught us anything, it was that we can move quickly to organise a fully online h... 2021-09-28 22:14:33 | 阅读: 17 | 收藏 | sensepost.com wopr sensecon workshop movie

Building an offensive RPC interface Using the Windows Remote Procedure Call (RPC) interface is an interesting concept when conssi... 2021-08-04 02:50:13 | 阅读: 74 | 收藏 | sensepost.com client remote midl windows

blackhat_defcon_virtual_vegas_2021.zip Phew! This year’s hacker summer camp is packed with presentations from several hackers across... 2021-08-01 03:39:23 | 阅读: 33 | 收藏 | sensepost.com talks delivering william stage michael

Come do Wi-Fi! Reading time ~5 min... 2021-07-19 17:42:08 | 阅读: 28 | 收藏 | sensepost.com captive portals network unplugged airodump

Exploring The Fundamentals We are excited to be presenting our Hands-on-Hacking Fundamentals (HHF) course at this year’s... 2021-07-19 03:59:40 | 阅读: 35 | 收藏 | sensepost.com nmap network handshake hhf

Our Enterprise Infrastructure Hacking Course Reading time ~4 min... 2021-07-19 01:23:16 | 阅读: 68 | 收藏 | sensepost.com blackhat ourselves powershell privileges

Adventures into HTTP2 and HTTP3 A few months ago I was exploring the write-ups and video solutions for the retired HackTheBox... 2021-05-27 17:02:02 | 阅读: 92 | 收藏 | sensepost.com network burp exchange http2

From 500 to Account Takeover IntroductionWhat seemed like a regular Cross-site Scripting (XSS) vulnerability on an HTT... 2021-03-03 04:24:02 | 阅读: 97 | 收藏 | sensepost.com bypass gaimage webapp victim payload

on ios binary protections I just got off a call with a client, and realised we need to think about how we report binary... 2021-03-02 23:22:01 | 阅读: 155 | 收藏 | sensepost.com protections arc library macho canaries

dwn – a docker pwn tool manager experiment Years ago I learnt docker basics because I just couldn’t get that $ruby_tool to install. The... 2021-02-08 18:42:28 | 阅读: 132 | 收藏 | sensepost.com dwn network semgrep mappings containers

Android Application Specific Proxies, Easy Mode In this post I want to share two things. First, a quick primer on how you would you go about... 2021-01-29 20:33:26 | 阅读: 69 | 收藏 | sensepost.com objection proxy github pinning sensepost

Duo Two-factor Authentication Bypass It’s too easy when hacking, to assume something is invulnerable and not interrogate it. This... 2021-01-28 17:39:54 | 阅读: 83 | 收藏 | sensepost.com duo attacker bypass victim txid

sconwar – sensecon 2020 Much like other events in 2020, our annual internal hackathon took a remote format this year,... 2020-11-24 03:01:33 | 阅读: 94 | 收藏 | sensepost.com client sconwar players played jameel

DualSense Reverse Engineering Ciao belli!On the 19th of November 2020, SONY finally released the new PlayStation 5 in t... 2020-11-23 18:52:32 | 阅读: 153 | 收藏 | sensepost.com dualsense dual shock buttons speaker

sensecon 2020 ex post facto When we finally decided on a date, sensecon 2020 was little over a month away. Unlike our pub... 2020-11-14 01:21:41 | 阅读: 119 | 收藏 | sensepost.com hackathon sensecon night client sconwar

Szensecon Discord Bot We have written a lot about SenseCon by now, but there is one more thing we can talk about! I... 2020-11-10 02:47:01 | 阅读: 86 | 收藏 | sensepost.com otp sneaky emoji sensecon

thumbscr-ews – a python EWS tool Something I have found myself doing more and more often is using Exchange Web Services (EWS)... 2020-11-04 23:39:55 | 阅读: 91 | 收藏 | sensepost.com exchangelib ews mails thumbscr gal

More On Foreign Hashes This is an update on this previous post on foreign NT hashes where I got things a little wron... 2020-10-08 16:40:14 | 阅读: 86 | 收藏 | sensepost.com arabic utf16le jameel d9 jameel1

Pass-the-hash WiFi Thanks to a tweet Dominic responded to, I saw someone mention Passing-the-hash when I think t... 2020-10-02 23:29:44 | 阅读: 112 | 收藏 | sensepost.com eap octet 0x74 0x6e 0x69

Let me store that for you A while ago Jonas Lykkegaard disclosed a zeroday that could be used to create files in the SY... 2020-09-12 00:44:51 | 阅读: 77 | 收藏 | sensepost.com windows payload jonas webio storvsp