00000000: 7265 6772 6573 7368 696f 6e5f 6376 652d regresshion_cve-
00000010: 3230 3234 2d36 3338 375f 6f70 656e 7373 2024-6387_openss
00000020: 685f 7675 6c6e 6572 6162 696c 6974 790a h_vulnerability.
00000030: 426c 7565 2054 6561 6d20 2d20 5265 6772 Blue Team - Regr
00000040: 6553 5348 696f 6e20 2843 5645 2d32 3032 eSSHion (CVE-202
00000050: 342d 3633 3837 292d 204f 7065 6e53 5348 4-6387)- OpenSSH
00000060: 2056 756c 6e65 7261 6269 6c69 7479 0a72 Vulnerability.r
00000070: 6567 7265 7373 6869 6f6e 5f63 7665 2d32 egresshion_cve-2
00000080: 3032 342d 3633 3837 5f6f 7065 6e73 7368 024-6387_openssh
00000090: 5f76 756c 6e65 7261 6269 6c69 7479 0a42 _vulnerability.B
000000a0: 6c75 6520 5465 616d 202d 2052 6567 7265 lue Team - Regre
000000b0: 5353 4869 6f6e 2028 4356 452d 3230 3234 SSHion (CVE-2024
Unauthenticated Remote code Execution in OpenSSH Server on glibc-based Linux Systems (RegreSSHion)
2 July 2024, 4 min read
00000000: 6d69 6372 6f73 6f66 742d 6465 6665 6e64 microsoft-defend
00000010: 6572 2d65 6e64 706f 696e 742d 726f 6775 er-endpoint-rogu
00000020: 652d 6465 7669 6365 732d 6e6f 742d 6f6e e-devices-not-on
00000030: 626f 6172 6469 6e67 0a4d 6963 726f 736f boarding.Microso
00000040: 6674 2044 6566 656e 6465 7220 456e 6470 ft Defender Endp
00000050: 6f69 6e74 207c 2055 6e6d 616e 6167 6564 oint | Unmanaged
00000060: 2044 6576 6963 6573 202d 2044 6574 6563 Devices - Detec
00000070: 7469 6f6e 207c 204e 6f74 204f 6e62 6f61 tion | Not Onboa
00000080: 7264 6564 2044 6576 6965 730a 6d69 6372 rded Devies.micr
00000090: 6f73 6f66 742d 6465 6665 6e64 6572 2d65 osoft-defender-e
000000a0: 6e64 706f 696e 742d 726f 6775 652d 6465 ndpoint-rogue-de
000000b0: 7669 6365 732d 6e6f 742d 6f6e 626f 6172 vices-not-onboar
Rogue Devices detecting by Microsoft Defender Endpoint
3 June 2021, 2 min read
Solarigate/Sunburst IR plan & Investigation Strategy
22 December 2020, 5 min read
00000000: 6f73 696e 742d 656e 756d 6572 6174 696f osint-enumeratio
00000010: 6e2d 7379 6e61 7073 696e 742d 756e 6966 n-synapsint-unif
00000020: 6965 642d 7265 7365 6172 6368 0a4f 5349 ied-research.OSI
00000030: 4e54 202d 2053 796e 6170 7349 6e74 2055 NT - SynapsInt U
00000040: 6e69 6669 6564 2052 6573 6561 7263 6820 nified Research
00000050: 546f 6f6c 0a6f 7369 6e74 2d65 6e75 6d65 Tool.osint-enume
00000060: 7261 7469 6f6e 2d73 796e 6170 7369 6e74 ration-synapsint
00000070: 2d75 6e69 6669 6564 2d72 6573 6561 7263 -unified-researc
00000080: 680a 4f53 494e 5420 2d20 5379 6e61 7073 h.OSINT - Synaps
00000090: 496e 7420 556e 6966 6965 6420 5265 7365 Int Unified Rese
000000a0: 6172 6368 2054 6f6f 6c0a 6f73 696e 742d arch Tool.osint-
000000b0: 656e 756d 6572 6174 696f 6e2d 7379 6e61 enumeration-syna
Validate the emails on multiple websites
5 October 2020, 1 min read
Workflow for Bug Bounty Submissions
19 September 2020, 6 min read
Validate the emails on multiple websites
15 September 2020, 1 min read
Stealing saved passwords using Powershell
15 September 2020, 1 min read
CVE-2020-1472
14 September 2020, 1 min read
00000000: 7265 6474 6561 6d2d 7469 702d 6368 616e redteam-tip-chan
00000010: 6765 2d6d 6163 2d61 6464 7265 7373 0a52 ge-mac-address.R
00000020: 6564 5465 616d 2054 6970 202d 2043 6861 edTeam Tip - Cha
00000030: 6e67 6520 4d41 4320 6164 6472 6573 7320 nge MAC address
00000040: 696e 2065 6e64 706f 696e 740a 7265 6474 in endpoint.redt
00000050: 6561 6d2d 7469 702d 6368 616e 6765 2d6d eam-tip-change-m
00000060: 6163 2d61 6464 7265 7373 0a52 6564 5465 ac-address.RedTe
00000070: 616d 2054 6970 202d 2043 6861 6e67 6520 am Tip - Change
00000080: 4d41 4320 6164 6472 6573 7320 696e 2065 MAC address in e
00000090: 6e64 706f 696e 740a 7265 6474 6561 6d2d ndpoint.redteam-
000000a0: 7469 702d 6368 616e 6765 2d6d 6163 2d61 tip-change-mac-a
000000b0: 6464 7265 7373 0a52 6564 5465 616d 2054 ddress.RedTeam T
Change MAC Address in endpoint machines.
12 September 2020, 1 min read
Download any files from internet using "MpCmdRun.exe"
4 September 2020, 1 min read
Google dork to identify the git
11 March 2017, 1 min read
Scanning SSH keys for Weak credentials.
21 February 2017, 1 min read
Ticketbleed vulnerability
10 February 2017, 1 min read
Stealing saved passwords (Autofill enabled) from browsers POC code
24 November 2016, 1 min read
00000000: 656e 6162 6c65 2d74 6572 6d69 6e61 6c2d enable-terminal-
00000010: 6869 7374 6f72 792d 6c6f 6767 696e 670a history-logging.
00000020: 5365 6375 7269 7479 2041 646d 696e 2054 Security Admin T
00000030: 6970 2d20 456e 6162 6c65 2074 6572 6d69 ip- Enable termi
00000040: 6e61 6c20 6869 7374 6f72 7920 6c6f 6767 nal history logg
00000050: 696e 670a 656e 6162 6c65 2d74 6572 6d69 ing.enable-termi
00000060: 6e61 6c2d 6869 7374 6f72 792d 6c6f 6767 nal-history-logg
00000070: 696e 670a 5365 6375 7269 7479 2041 646d ing.Security Adm
00000080: 696e 2054 6970 2d20 456e 6162 6c65 2074 in Tip- Enable t
00000090: 6572 6d69 6e61 6c20 6869 7374 6f72 7920 erminal history
000000a0: 6c6f 6767 696e 670a 656e 6162 6c65 2d74 logging.enable-t
000000b0: 6572 6d69 6e61 6c2d 6869 7374 6f72 792d erminal-history-
Lazy Linux admins should enable below history logging.
22 November 2016, 1 min read
00000000: 7768 6174 2d79 6f75 722d 6272 6f77 7365 what-your-browse
00000010: 722d 6b6e 6f77 732d 6162 6f75 742d 796f r-knows-about-yo
00000020: 750a 4973 2079 6f75 7220 6272 6f77 7365 u.Is your browse
00000030: 7220 6b6e 6f77 7320 6162 6f75 7420 796f r knows about yo
00000040: 7520 3f0a 7768 6174 2d79 6f75 722d 6272 u ?.what-your-br
00000050: 6f77 7365 722d 6b6e 6f77 732d 6162 6f75 owser-knows-abou
00000060: 742d 796f 750a 4973 2079 6f75 7220 6272 t-you.Is your br
00000070: 6f77 7365 7220 6b6e 6f77 7320 6162 6f75 owser knows abou
00000080: 7420 796f 7520 3f0a 7768 6174 2d79 6f75 t you ?.what-you
00000090: 722d 6272 6f77 7365 722d 6b6e 6f77 732d r-browser-knows-
000000a0: 6162 6f75 742d 796f 750a 4973 2079 6f75 about-you.Is you
000000b0: 7220 6272 6f77 7365 7220 6b6e 6f77 7320 r browser knows
Browser is having capability to access system level data.
22 November 2016, 1 min read
00000000: 6279 7061 7373 2d77 6166 2d62 6c6f 6773 bypass-waf-blogs
00000010: 0a42 7970 6173 7320 5741 4620 2d20 5465 .Bypass WAF - Te
00000020: 6368 6e69 7175 6573 0a62 7970 6173 732d chniques.bypass-
00000030: 7761 662d 626c 6f67 730a 4279 7061 7373 waf-blogs.Bypass
00000040: 2057 4146 202d 2054 6563 686e 6971 7565 WAF - Technique
00000050: 730a 6279 7061 7373 2d77 6166 2d62 6c6f s.bypass-waf-blo
00000060: 6773 0a42 7970 6173 7320 5741 4620 2d20 gs.Bypass WAF -
00000070: 5465 6368 6e69 7175 6573 0a62 7970 6173 Techniques.bypas
00000080: 732d 7761 662d 626c 6f67 730a 4279 7061 s-waf-blogs.Bypa
00000090: 7373 2057 4146 202d 2054 6563 686e 6971 ss WAF - Techniq
000000a0: 7565 730a 6279 7061 7373 2d77 6166 2d62 ues.bypass-waf-b
000000b0: 6c6f 6773 0a42 7970 6173 7320 5741 4620 logs.Bypass WAF
Bypass the Web Application Firewalls
20 November 2016, 1 min read
00000000: 6469 7274 7963 6f77 2d76 756c 6e65 7261 dirtycow-vulnera
00000010: 6269 6c69 7479 2d71 7569 636b 6368 6563 bility-quickchec
00000020: 6b0a 4469 7274 7943 6f77 2056 756c 6e65 k.DirtyCow Vulne
00000030: 7261 6269 6c69 7479 2044 6574 6563 7469 rability Detecti
00000040: 6f6e 0a64 6972 7479 636f 772d 7675 6c6e on.dirtycow-vuln
00000050: 6572 6162 696c 6974 792d 7175 6963 6b63 erability-quickc
00000060: 6865 636b 0a44 6972 7479 436f 7720 5675 heck.DirtyCow Vu
00000070: 6c6e 6572 6162 696c 6974 7920 4465 7465 lnerability Dete
00000080: 6374 696f 6e0a 6469 7274 7963 6f77 2d76 ction.dirtycow-v
00000090: 756c 6e65 7261 6269 6c69 7479 2d71 7569 ulnerability-qui
000000a0: 636b 6368 6563 6b0a 4469 7274 7943 6f77 ckcheck.DirtyCow
000000b0: 2056 756c 6e65 7261 6269 6c69 7479 2044 Vulnerability D
DirtyCow Detection
24 October 2016, 1 min read
00000000: 7765 6c63 6f6d 652d 746f 2d6d 792d 7465 welcome-to-my-te
00000010: 6368 2d62 6c6f 670a 5a65 7230 7472 7573 ch-blog.Zer0trus
00000020: 7420 5365 6320 426c 6f67 202d 2049 6e74 t Sec Blog - Int
00000030: 726f 6475 6374 696f 6e0a 7765 6c63 6f6d roduction.welcom
00000040: 652d 746f 2d6d 792d 7465 6368 2d62 6c6f e-to-my-tech-blo
00000050: 670a 5a65 7230 7472 7573 7420 5365 6320 g.Zer0trust Sec
00000060: 426c 6f67 202d 2049 6e74 726f 6475 6374 Blog - Introduct
00000070: 696f 6e0a 7765 6c63 6f6d 652d 746f 2d6d ion.welcome-to-m
00000080: 792d 7465 6368 2d62 6c6f 670a 5a65 7230 y-tech-blog.Zer0
00000090: 7472 7573 7420 5365 6320 426c 6f67 202d trust Sec Blog -
000000a0: 2049 6e74 726f 6475 6374 696f 6e0a 7765 Introduction.we
000000b0: 6c63 6f6d 652d 746f 2d6d 792d 7465 6368 lcome-to-my-tech
Technical Blog
19 April 2015, 1 min read