Blog
Home / Blog

Power of Covenant C2 Framework
In the ever-evolving world of cybersecurity, staying one step ahead of malicious actors is crucial. Command and control (C2) frameworks play a vital role in

DOM-Based Cross-Site Scripting
As the digital landscape continues to evolve, so do the threats that target web applications. Cross-site scripting (XSS) remains a persistent and dangerous vulnerability among

Defending Against Phishing Attacks
As technology continues to advance, so do the tactics of cybercriminals. Phishing attacks trick individuals into divulging sensitive information or downloading harmful software. In this

Understanding CRLF Injection Attacks
In web security, CRLF Injection Attacks remain a potent threat. This blog aims to provide comprehensive insight into this malicious technique, its implications, and the

Exploiting MS SQL Servers
As companies continue to rely on databases to store sensitive information, securing the data has become a top priority. MS SQL Server is a popular

BloodHound Cheat Sheet
BloodHound is a powerful security tool that uses graph theory to reveal the relationships between users, groups, and computers in a domain. In this comprehensive

Resource-Based Constrained Delegation (RBCD) Attack
Resource-Based Constrained Delegation (RBCD) is a feature introduced in Windows Server 2012 that allows administrators to configure which accounts are trusted to delegate on their

AS-REP Roasting
Kerberos is a network authentication protocol used to provide secure authentication over a non-secure network. While it is an essential component of network security, it

Exploiting Active Directory Certificate Services (AD CS)
With the increasing use of digital certificates for encryption, authentication, and other security purposes, Active Directory Certificate Services (AD CS) has become a critical component

A Comprehensive Guide to Android Penetration Testing
Android penetration testing is a crucial aspect of ensuring the security of mobile applications. With the increasing popularity of Android devices and the widespread use

What is Objective-Based Penetration Testing?
In today’s digital landscape, where cyber threats loom large, organizations increasingly recognize the importance of robust cybersecurity measures. As cyber-attacks continue to rise in frequency

Pen testing vs Bug Bounty
Penetration testing (pen testing) and bug bounty programs are two popular methods of ensuring the security of the digital assets of a business. While both