Active Directory Trust Relationship Attacks
Our lab environment examples show how to get info about domains and elevate privileges
Irina Belyaeva
NTLM Reflection attack: when it works
Under what conditions can a non-domain Windows host be compromised
From RCE on a controller to domain admin
An interesting experience in solving a pentesting task
Accessing Bitbucket through a test K8s cluster
Kubernetes API can reveal many secrets without authentication
Accessing services through Kubernetes
K8s clusters can be an interesting target during a pentest
Scan2hive helps upload data to Hive
How we improved our work with Hexway Pentest Suite