Our Blog
make prs, not war
Reading time:
~8 min
Posted
by Leon Jacobs
on
08 July 2024
Everyday we’re faced with a choice – some glaringly obvious, others more subtle. The choice to give, or to take,...
Dumping LSA secrets: a story about task decorrelation
Reading time:
~16 min
Posted
by aurelien.chalot@orangecyberdefense.com
on
03 July 2024
While doing an internal assessment, I was able to compromise multiple computers and servers but wasn’t able to dump the...
Targeting an industrial protocol gateway
Reading time:
~20 min
Posted
by claire.vacherot@orangecyberdefense.com
on
30 May 2024
Inside industrial systems (also known as Operational Technology, or OT), devices communicate with each other and can be accessed over...
Guest vs Null session on Windows
Reading time:
~9 min
Posted
by aurelien.chalot@orangecyberdefense.com
on
18 April 2024
If you have been doing internal assessments on Active Directory infrastructure you may have heard the following words: “Null session”,...
From Discovery to Disclosure: ReCrystallize Server Vulnerabilities
Reading time:
~11 min
Posted
by Paul van der Haas
on
22 March 2024
TL&DR – While on an assessment, I found an instance of ReCrystallize Server. It had many problems, some of which...
Mail in the Middle – A tool to automate spear phishing campaigns
Reading time:
~15 min
Posted
by Felipe Molina
on
26 February 2024
Context In the chilly month of December 2023, my colleagues Jason (@BreakerOfSigns), Szymon (@TH3_GOAT_FARM3R), and myself (@felmoltor) were on a...
Deck of Cards CTF
Reading time:
~9 min
Posted
by Jason Spencer
on
19 February 2024
I created a small crypto style CTF for Black Hat last year (we’re training again this year, check our courses...
Serial PitM
Reading time:
~20 min
Posted
by Rogan Dawes
on
06 February 2024
Sometimes you need to get in the way of a hardware device and its controller, and see what it has...
Sensecon 23: from Windows drivers to an almost fully working EDR
Reading time:
~54 min
Posted
by aurelien.chalot@orangecyberdefense.com
on
31 January 2024
TL;DR I wanted to better understand EDR’s so I built a dummy EDR and talk about it here. EDR (Endpoint...