In Microsoft Entra, Conditional Access is, after the Authentication itself, the most crucial part of defense against attackers. It’s referenced as “zero trust policy engine” and the idea behind is, that in addition to your username and password you can also enforce additional requirements when you access a specific resource. This could be any combination of a second factor (2FA), a specific authentication method (e.g. passkey) a device that is in a “compliant” state a trusted or compliant network and a lot more, depending on your specific use case.

Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering. - Maldev-Academy/ElectronVulnScanner

🔥📜 Forbidden collection of Red Team sorcery 📜🔥. Contribute to vari-sh/RedTeamGrimoire development by creating an account on GitHub.

I'll never forget one of my first red team engagements where I learned this lesson the hard way. I'd spent two days carefully phishing my way into a financia...

Gain the knowledge and skills necessary to operate against advanced defences.

Ivanti Neurons for ITSM (On Premise) exploits. Contribute to synacktiv/itsm-exploit development by creating an account on GitHub.

PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS. - nickvourd/PrivKit

BEERUS Framework for Android. Contribute to hakaioffsec/beerus-android development by creating an account on GitHub.

Welcome to watchTowr vs the Internet, part 68. That feeling you’re experiencing? Dread. You should be used to it by now. As is fast becoming an unofficial and, apparently, frowned upon tradition - we identified incredible amounts of publicly exposed passwords, secrets, keys and more for very sensitive environments

Authentication reflection has been around for more than 20 years, but its implications in modern Windows networks are far from obsolete. Even after all the patches Microsoft has rolled out over the…

All the deals for InfoSec related software/tools this Black Friday - 0x90n/InfoSec-Black-Friday

### Summary A vulnerability in Wazuh Agent (v4.10.1) allows authenticated attackers to force NTLM authentication through malicious UNC paths in various agent configuration settings, potentially le...

Personal Blog Home Page

Global leader in hands-on learning for enterprise and cloud security education. Join 10000+ infosec professionals from 130+ countries

New unpatched 0 day vulnerability allowing to leak NTLM hashes from browsers with one click - rubenformation/ms-photos_NTLM_Leak

Impacket with added MSSQL Relay server. Contribute to epotseluevskaya/impacket_mssqlrelay development by creating an account on GitHub.

Chat Control is back on the menu. To highlight the corruption behind the proposal, Mullvad VPN now presents "And Then?" A film directed by Jonas Åkerlund.

Lab used for workshop and CTF. Contribute to Pennyw0rth/NetExec-Lab development by creating an account on GitHub.

HTTP Anomaly Rank If you've ever used Burp Intruder or Turbo Intruder, you'll be familiar with the ritual of manually digging through thousands of responses by repeatedly sorting the table via length,

Site Unseen: Enumerating and Attacking Active Directory Sites

Identify Azure AD resources that issue tokens without MFA enforcement using the ROPC grant flow. - AlexLinov/EntraMFACheck