Hack

Microsoft Tools & Hacks

Active Directory Security: Unmasking and Preventing the Skeleton Key Threat

Active Directory is the backbone of enterprise security, but it's vulnerable to sophisticated threats like the Skeleton Key attack. This article explores how to unmask …

Microsoft Tools & Hacks

Weaponizing Certutil: How Attackers Abuse Legitimate Tools for Lateral Movement

Attackers are increasingly leveraging legitimate system tools like `certutil.exe` for "Living Off The Land" (LOTL) strategies. This technique allows them to blend in, bypass security …

Microsoft Tools & Hacks

Load and Inject Malicious DLL Using Microsoft Tools

Attackers can leverage legitimate Microsoft signed binaries to load and inject malicious DLLs into running processes, effectively bypassing application whitelisting and endpoint security.

Microsoft Tools & Hacks

PowerShell: Malwares Can Use It Without PowerShell.exe

Advanced malware can execute PowerShell commands without ever calling powershell.exe, effectively bypassing many endpoint security solutions. This research explores the techniques used and how to …

Microsoft Tools & Hacks

Hide Malware Using Microsoft HTML Interpreters

Microsoft HTML Application Host (mshta.exe) and other HTML interpreters can be leveraged by attackers to execute malicious scripts while evading traditional security controls.