Pillaging Data from Private AWS Subnets
Exploiting overly permissive VPC endpoints to exfiltrate data from private AWS subnets
Bruteforcing Bitcoin Seed Phrases
Checking Bitcoin Seed Phrases for transactions and balances
Pwnboxes
Simple method to define and build security testing containers in Podman
Securing Jellyfin
How to secure a Jellyfin media server
Pentesting AWS Enviroments
Attacking AWS Accounts from a black box perspective
New AWS Tag Checks
Using Snotra to Check For Sensitive Tags
Penetration Testing Training Labs
Labs to learn penetration testing and offensive security
Using Atomic Swaps to DCA during high Fees and Obtaining Private UTXOs
Swapping from Lightning to Liquid to avoid high on-chain fees when Dollar Cost Averaging (DCA) and swapping back on-chain to obtain fresh private UTXO's
Azure Monitor - Activity Logging, Resource Logging and Alerts
Making Sense of Logging in Azure with Azure Monitor, Diagnostic Settings and Activity Log Alerts
Penetration Test Reports and Vulnerability Aggregation
Penetration test reports, aggregating findings and thinking more deeply.
AWS and GitHub OIDC Cross Account Roles
AWS and overly permissive GitHub OIDC cross-account role trust policies
Cybersecurity Fundamentals for Kubernetes
Blog post about Kubernetes Security Fundementals
Understanding Cloud Configuration Reviews
Blog post about Cloud Configuration Reviews
FirewallD VPN Network Lock
Configuring a VPN network lock on Fedora with FirewallD for boht host and podman traffic.
Windows VMs With Virt-Manager
Running Windows VMs on Linux with Qemu/KVM and Virtual Machine Manager
From Domain User to Domain Admin (DA), From DA to Global Admin (GA)
How to own an internal domain and pivot into the cloud
Snotra Lambda
Continuous AWS Testing with Snotra, Lambda, Cloud Watch EventBridge and S3.
Python Tools Using ldap3 and Issues with Channel Binding and Signing
Fixing issues in common tools with Python ldap3 when connecting to Domain Controllers with LDAP signing and binding enabled.
Internal Top Five
A series of blog Posts for Claranet Cyber Security about common high impact issues discoverd on internal penetration tests and how to fix them.
Relaying to Active Directory Certificate Services (ADCS) and Resource Based Constrained Delegation (RBCD)
Getting Local Administrator access with NTLM Relay attacks against ADCS and RBCD attacks.