Skip to content

Security Leadership

Strategy, programs, compliance and buying decisions for security leaders.

The Art of Keytab Files

A keytab file is a file containing pairs of Kerberos principals and encrypted keys. These files are used to authenticate a principal on a network. Kerberos is a network authentication protocol that allows individuals communicating over a non-secure network to prove their identity to one another in a secure manner. Brief Overview of Keytab Files… Read More »The Art of Keytab Files

Attack & Defend LLMNR: A Widespread Shadow Network Discovery Protocol

Link-Local Multicast Name Resolution (LLMNR), a seemingly important protocol in Windows environments, can be a silent accomplice for cyber adversaries seeking to exploit network vulnerabilities. Let us understand the technical intricacies of LLMNR and unravel how it can be exploited for reconnaissance purposes, examining each step from a Red Teamer’s perspective. Understanding LLMNR LLMNR is… Read More »Attack & Defend LLMNR: A Widespread Shadow Network Discovery Protocol

Adopting Generative AI In Cyber security

Adopting Generative AI In Cyber Security

In recent years, generative AI has gained significant attention across industries. While it has shown amazing results in applications like image generation, text synthesis, media generation, transformation of content between different media etc, the field of cybersecurity has recently started warming up to the idea of using Generative AI. The question is: Where in cyber… Read More »Adopting Generative AI In Cyber Security

Uncovering The Robots.txt Role In Cybersecurity

In the ever-changing realm of cybersecurity, it’s the small details that often matter the most. The robots.txt file, while seemingly insignificant, is a crucial component that can fortify a website’s security. We will explore robots.txt in-depth, delving into its functions, and uncovering its role in Cyber Security. Robots.txt: A Closer Look Robots.txt, short for “Robots… Read More »Uncovering The Robots.txt Role In Cybersecurity

FC Attacking Modern Web Applications

Attacking Modern Web Applications

In the realm of contemporary of Modern web applications, the prevalent architectural framework of choice often takes the form of microservices architecture. In this context, what appears to be a unified front-end application is essentially an amalgamation of numerous small, distinct micro-services on the back end, interconnected through a reverse proxy mechanism. Consider, for instance,… Read More »Attacking Modern Web Applications

Firecompass ranked #1 AI on HackerOne. Read more →