A blog notepad about learning ethical hacking (tactics, techqniues, tools gadgets)
On a recent engagement, I have jumped onto a small JSON file laying in a GitLab repository which looked very intriguing. Inside there it was written it’s a service account. I found out this is related to the Google Cloud Platform (GCP). Of course, I had to explore it more, however, I never had any … Read more Google Cloud Platform pentest notes – service accounts
During March and April 2020 I had been engaged in carrying out a comprehensive Red Team assessment against Zero-Point Security and their newly acquired start-up Cyberbotic. This is more or less how a course named Red Team Ops begins. I welcome you to read this short review of the newly created course by Zero Point … Read more Certified Red Team Operator – Course review
This is the second part of the blog post series related to the preparation of a phishing campaign for security awareness training or red team operation. In part one, you could read how to set up tools like VPS, domain, SSL cert, and install GoPhish. This post will get your trough on how to use … Read more How to prepare a phishing campaign with GoPhish – part 2 campaign setup
You might need to perform security awareness training related to phishing for your customers. Or you just starting red team operation and want to start from phishing. For this reason, you start looking for tools and available options. This is what happened to me and in this post, you will read how to prepare tools … Read more How to prepare a phishing campaign with GoPhish – part 1 tools
Currently corporate networks consist of Active Directory environments. However, most renown network pentesting courses don’t learn much about how to pentest and abuse AD. This was the reason for me to start looking for courses where I could get knowledge on this topic. After googling and reading some of the reviews I knew next course … Read more Active Directory Attack and Defense – course review from PentesterAcademy.com