// lab
Lab
Attacks from the field, taken apart — how they work, how to reproduce them and what to do about them from both sides of the fence. Every post ends with separate takeaways for the red team and the blue team: pick your side, peek at the other.
// September 2019 · Malware
Can CTRL+C and CTRL+V be dangerous?
CTRL+C and CTRL+V are probably the most frequently used keyboard shortcuts today. But can using the computer clipboard be dangerous in any way?
red: 1 tipblue: 2 tips// March 2019 · Red team
Powershell meets Microsoft SQL Server — attacking at scale
It is not hard to find the default MSSQL passwords for the sa account. Nor is it hard to test them and, using xp_cmdshell, run code in the operating system. Now we will see how to do it fast and at large scale.
red: 4 tipsblue: 3 tips// February 2019 · Red team
Powershell meets Microsoft SQL Server — running OS commands
We already know how to find MSSQL services with an easy/default sa password. Armed with that, we'll use the xp_cmdshell procedure to run a command in the operating system.
red: 3 tipsblue: 4 tips// February 2019 · Red team
Powershell meets Microsoft SQL Server — hunting for passwords
PowerShell makes it easy to connect to Microsoft SQL Server. We'll see how PowerShell can help us run a dictionary attack against the superadmin's password. We'll also think about where to look for MSSQL password ideas.
red: 5 tipsblue: 4 tips// February 2019 · Red team
Docker - Escape from Alcatraz
In production infrastructure, Docker makes it easy to raise your security posture through quick and clean separation of microservices - containerization. Often it's developers or testers who get to launch new containers - we'll take a look at whether that can turn out to be dangerous in any way.
red: 4 tipsblue: 6 tips