Red Teaming - @fuffsec

Sign in Subscribe

Red Teaming

A collection of 9 posts

Understanding and Enumerating Restricted Groups in Active Directory

Understanding and Enumerating Restricted Groups in Active Directory

Introduction Active Directory (AD) is a cornerstone for managing permissions and resources in many organizations. Within AD, the concept of "restricted groups" is vital for maintaining security and access controls. This blog will explore what restricted groups are, their importance in AD security, and how to test and

Tunneling and Pivoting through cyber ether

Tunneling and Pivoting through cyber ether

After a Red Teamer (RT) get into a network via any vulnerability. The RT wants to access all the network accessible by the compromised host. Here, the lateral movement and expansion depends on how well the RT understands the Pivoting phase of the exploitation. Let's Hack Check for

Primer on Antivirus Evasion

What is an Anti-Virus? It is like a COVID-19 vaccine for digital systems. It protects computer machines from bad/malicious intent software that tries to steal our data. How does it detect a threat? 1. Static Analysis 1. signature-based 1. compares the portion of the virus with the database of

Red Teaming — AD (Kerberos Unconstrained Delegation Attack)

Red Teaming — AD (Kerberos Unconstrained Delegation Attack)

What is Kerberos delegation?

Red Teaming — AD (Kerberoasting)

Red Teaming — AD (Kerberoasting)

Kerberoasting may sound like a complicated cyberattack, but in reality, it is a straightforward technique that preys on human behavior and…

Data Analysis for Cyber Security 101: Detecting Lateral Movement

Red Teaming — AD (Lateral movement with PSRemoting)

Lateral movement is a term used in cybersecurity to describe the movement of an attacker within a network after gaining initial access. In…

Red Teaming — AD Enumeration (GPO & ACL)

Red Teaming — AD Enumeration (GPO & ACL)

This is the continuation of the following blog:

Red Teaming — AD Enumeration (Domain, Objects & trust)

Red Teaming — AD Enumeration (Domain, Objects & trust)

Red teaming is a crucial aspect of cybersecurity that involves the simulation of real-world cyberattacks to identify vulnerabilities and…

Primer on Active Directory for OSCP/OSEP/CRTP/CRTE

Primer on Active Directory for OSCP/OSEP/CRTP/CRTE