InIFCRbyOliver Lyak·Dec 26, 2022Pass-the-Challenge: Defeating Windows Defender Credential GuardIn this blog post, we present new techniques for recovering the NTLM hash from an encrypted credential protected by Windows Defender…
InIFCRbyOliver Lyak·Aug 4, 2022Certipy 4.0: ESC9 & ESC10, BloodHound GUI, New Authentication and Request Methods — and more!A new version of Certipy has been released along with a forked BloodHound GUI that has PKI support! In this blog post, we will look at…A response icon1A response icon1
InIFCRbyOliver Lyak·May 10, 2022Certifried: Active Directory Domain Privilege Escalation (CVE-2022–26923)In this blog post, we’ll dive into a recently patched Active Directory Domain Privilege Escalation vulnerability that I reported through…A response icon1A response icon1
InIFCRbyOliver Lyak·Feb 19, 2022Certipy 2.0: BloodHound, New Escalations, Shadow Credentials, Golden Certificates, and more!As the title states, the latest release of Certipy contains many new features, techniques and improvements. This blog post dives into the…
InIFCRbyOliver Lyak·Feb 8, 2022SpoolFool: Windows Print Spooler Privilege Escalation (CVE-2022-21999)In this blog post, we’ll look at a Windows Print Spooler local privilege escalation vulnerability that I found and…A response icon4A response icon4
