Posts

• Detecting shadow credentials Mar 21

• After the storm - how to move on with NTLM Sep 24
• Abusing Kerberos S4U2self for local privilege escalation Jun 26
• Fun with processes - Suspend and Resume May 3

• ConvertTo-Powershell - wrapping applications with PS Sep 6
• PSArmoury 1.4 - now with even more armour Feb 28

• An introduction to Golden Certificates Dec 7
• Evading anti-virus with Powershell Armoury Dec 2
• Introducing PoshADCS Nov 9
• Hello World Oct 21