Attacks from the field, taken apart — red team and blue team side by side. https://alphasec.pl/lab/en/ 2019-09-24T09:00:00Z Paweł Maziarz https://alphasec.pl/lab/en/ctrl-c-ctrl-v-moga-byc-grozne/ 2019-09-24T09:00:00Z 2019-09-24T09:00:00Z

CTRL+C and CTRL+V are probably the most frequently used keyboard shortcuts today. But can using the computer clipboard be dangerous in any way?

https://alphasec.pl/lab/en/powershell-mssql-atakowanie-na-skale/ 2019-03-15T09:00:00Z 2019-03-15T09:00:00Z

It is not hard to find the default MSSQL passwords for the sa account. Nor is it hard to test them and, using xp_cmdshell, run code in the operating system. Now we will see how to do it fast and at large scale.

https://alphasec.pl/lab/en/powershell-mssql-xp-cmdshell/ 2019-02-21T09:00:00Z 2019-02-21T09:00:00Z

We already know how to find MSSQL services with an easy/default sa password. Armed with that, we'll use the xp_cmdshell procedure to run a command in the operating system.

https://alphasec.pl/lab/en/powershell-mssql-domyslne-hasla/ 2019-02-17T09:00:00Z 2019-02-17T09:00:00Z

PowerShell makes it easy to connect to Microsoft SQL Server. We'll see how PowerShell can help us run a dictionary attack against the superadmin's password. We'll also think about where to look for MSSQL password ideas.

https://alphasec.pl/lab/en/docker-ucieczka-z-alcatraz/ 2019-02-10T09:00:00Z 2019-02-10T09:00:00Z

In production infrastructure, Docker makes it easy to raise your security posture through quick and clean separation of microservices - containerization. Often it's developers or testers who get to launch new containers - we'll take a look at whether that can turn out to be dangerous in any way.