Threat Research

2023 Trends in Phishing Techniques: What to Watch Out For Phishing, a deceptive technique used by cybercriminals, involves tricking individuals into disclosing sensitive information such as passwords, credit card numbers, or personal data. Initially, phishing predominantly relied on unsophisticated emails mimicking legitimate entities. However, it has evolved into a multifaceted threat encompassing various mediums and… Read More »2023 Trends in Phishing Techniques: What to Watch Out For

Attackers are always looking for new ways to get around protections and exploit flaws in the dynamic field of web security. HTTP smuggling is one such clever method that has gained popularity recently. By taking advantage of the complexities in the interpretation and processing of HTTP requests by web servers and proxy servers, this technique… Read More »Unveiling the Intricacies of HTTP Smuggling: A Technical Exploration

A keytab file is a file containing pairs of Kerberos principals and encrypted keys. These files are used to authenticate a principal on a network. Kerberos is a network authentication protocol that allows individuals communicating over a non-secure network to prove their identity to one another in a secure manner. Brief Overview of Keytab Files… Read More »The Art of Keytab Files

Race conditions, a critical vulnerability, arise when multiple processes or threads execute concurrently within a software system. This blog aims to provide a comprehensive understanding of race conditions and effective prevention strategies, accompanied by practical examples. Misconception – Is it commonly believed that Race Condition Bugs primarily result in Denial of Service (DoS)? Contrary to… Read More »Securing Your Code: Unraveling the Secrets of Race Condition Vulnerabilities

Link-Local Multicast Name Resolution (LLMNR), a seemingly important protocol in Windows environments, can be a silent accomplice for cyber adversaries seeking to exploit network vulnerabilities. Let us understand the technical intricacies of LLMNR and unravel how it can be exploited for reconnaissance purposes, examining each step from a Red Teamer’s perspective. Understanding LLMNR LLMNR is… Read More »Attack & Defend LLMNR: A Widespread Shadow Network Discovery Protocol