Deceptive Windows Security Dialog for Harvesting Credentials
Implementing ATT&CK MITRE's T1056.002 for credential harvesting via CredUIPromptForWindowsCredentialsW
[ Read ]Offensive Security Engineer · Red Teamer · Researcher
Implementing ATT&CK MITRE's T1056.002 for credential harvesting via CredUIPromptForWindowsCredentialsW
[ Read ]Exploiting ESC1, bypassing KB5014754 and KDC_ERR_PADATA_TYPE_NOSUPP errors.
[ Read ]Reverse engineering and exploitation of Topaz's wsftprm.sys driver for disabling Windows Defender and other PPL protected processes.
[ Read ]Gaining access to Realme's customer support by exploiting an API and Blind XSS flaw.
[ Read ]Proof of concept for the exploitation of two vulnerabilities in Roundcube Webmail version 1.6.7 and below, and in version 1.5.7 and below.
[ Read ]