Unquoted service paths

by | Dec 13, 2019 | Blue Team, Red team, Security, Windows

Reading Time: < 1 minuteWhen in the service definition path there is no quotes, the path can be interpreted differently by the OS. A service path with c:\progam files\sub dir\program name can be seen as follow ! c:\program.exe files\sub dir\program name c:\program...

Pi-Hole + DOH (DNS over HTTPS)

by | Nov 13, 2019 | Misc, Privacy, Security

Reading Time: < 1 minuteWant to bring more privacy to your home network ? Personnaly I installed a small raspberry Pi 3b running Raspbian and then installed Pi-Hole : https://pi-hole.net/ Simple step-by-step documentation here :...

Rename Functions for AV signature evading

by | Oct 25, 2019 | AV, Red team, Security, Windows

Reading Time: < 1 minute For academic purpose only.The used of some functions can trigger singature based Anti Virus detection. Example : SystemFunction032 or SamEnumerateUsersInDomain used in same particular programs.in this example let’s try to hide the...

DNS CAA Records

by | Sep 20, 2019 | Blue Team, Security

Reading Time: 1 minute As per RFC : CAA records assert a security policy that the holder of a domain name wishes to be observed by certificate issuers. The effectiveness of CAA records as an access control mechanism is thus dependent on observance of CAA constraints...