defensive

All Posts

Scanning SMB Shares Harder With smbls v2

Apr 24, 2024 | Austin Ralls

Common Misperceptions About Security Scanners

Jan 22, 2024 | Brad Dixon

The Adversarial Mindset

Jan 04, 2024 | Brad Dixon

If the Phish Won’t Go to You, You Can Surely Come to the Phish

Oct 06, 2023 | Roman Faynberg

Keeping an Eye on Your Public IP Space in Private

Jul 28, 2023 | Austin Ralls

Simplify Incident Response With CI/CD and Other Code Access Auditing

Aug 29, 2022 | Roman Faynberg

Security Assessment Color Palette

May 20, 2022 | Mike Zusman

Credentialed Windows Remote Code Execution Techniques

Feb 17, 2022 | Ángel Suárez-Bárcena Martín

How We Use BloodHound, and How It Can Help Defenders: 3 Ways IT Analysts Could Use BloodHound To Improve Windows Domain Security

Jan 10, 2022 | Austin Ralls

Inbox (1): Proper Email Authentication

Nov 18, 2021 | Austin Ralls

Scanning SMB Shares With smbls

Nov 03, 2021 | Austin Ralls

The Feeling Is Mutual: Elegant & Effective Authentication

Sep 21, 2021 | Jeff Ake

Be Careful With Your Testing Account Passwords

Jul 30, 2021 | Austin Ralls

In Praise of LAPS

Jun 30, 2021 | Austin Ralls

Three Most Common Security Mistakes Seen During AWS Application Assessments

May 27, 2021 | Ángel Suárez-Bárcena Martín

Unintentionally Exposing Your Organization to MFA bypasses on Azure Active Directory

Apr 19, 2021 | Ángel Suárez-Bárcena Martín

Secrets in Broad Daylight, or How $500,000/Year Software Can Help Hackers Compromise Your Network

Apr 12, 2021 | Roman Faynberg

Backend DDoS Protection

Jan 27, 2021 | Austin Ralls

Rule-Based Highlighter Plugin for BurpSuite

Feb 18, 2020 | Ángel Suárez-Bárcena Martín

Android Hard Coded Secrets

Aug 30, 2019 | Danny Rosseau

Intro to Inzure: New Security Tool for Azure Deployments

May 06, 2019 | Danny Rosseau

Implementing a Password Strength Indicator

Jun 22, 2018 | Jeremy Allen

Should GNSS Be a Threat Vector in Your Threat Model?

Apr 03, 2018 | Brad Dixon

JWT, OAuth, and Algorithm Choices

Feb 27, 2018 | Jeremy Allen

Securing M2M Gateways

Jun 10, 2016 | Jeremy Allen

NFC Edge Cases and Past Transgressions

Apr 15, 2016 | Max Sobell

Network Monitoring With nmap

Nov 04, 2013 | John Poch