[BLOG] Databases and Clouds: SQL Server as a C2 bit.ly/2J2nHXb

Finally a new blog post, "Defeating 2FA with Robots". Recently used RPA with phishing to get VPN access while subverting 2FA. Feedback Encouraged! adapt-and-attack.com/2018/06/04/def…

[BLOG] Tokenvator: A Tool to Elevate Privilege using Windows Tokens bit.ly/2JSY2l3 - More nice work from Alexander Leary (Alexander Polce Leary)! Lots of interesting use cases ;)

[Blog] Beyond LLMNR/NBNS Spoofing - Exploiting Active Directory-Integrated DNS blog.netspi.com/exploiting-adi… Also, #PowerShell ADIDNS spoofing functions added to Powermad github.com/Kevin-Robertso…

[Blog]Inveigh - What's New in Version 1.4 blog.netspi.com/inveigh-whats-… New version released with ADIDNS attacks, new relay attacks (session/enumerate), and support for multiple relay targets with target selection through enumeration and/or BloodHound imports github.com/Kevin-Robertso…

[BLOG] Manipulating Named Pipes, Token Privileges, and Minifilters with the Tokenvator v.2 Release - Super cool stuff from Alexander Polce Leary! blog.netspi.com/tokenvator-rel…

The Tokenvator wiki is now up on GitHub github.com/0xbadjuju/Toke…

Protect Your Payloads, Modern Keying Techniques (Leo Loobeek) -> youtube.com/watch?v=MHc3XP…

[Blog] ADIDNS Revisited - WPAD, GQBL, and More blog.netspi.com/adidns-revisit…

By popular demand, the Official #BloodHound Shirt BLUE TEAM Edition is here! As always, ALL profits from shirt sales go DIRECTLY to the Muscular Dystrophy Association. Get yours here: customink.com/fundraising/th…

Verifying myself: I am 0xbadjuju on Keybase.io. 4_n1_gHSkQ9Z15xHlBLj7aRnvLqSj_J8tqKt / keybase.io/0xbadjuju/sigs…

Expanding the Empire with SQL | NetSPI by Scott Sutherland Alexander Polce Leary > PowerUpSQL is now part of Empire #powershell blog.netspi.com/expanding-the-…

[BLOG] Targeting RSA Emergency Access Tokencodes - ift.tt/2swr804 More great work by Alexander Polce Leary !

An awesome new blog from Scott Sutherland Attacking SQL Server CLR Assemblies - blog.netspi.com/attacking-sql-…

[BLOG] S3 Buckets for Good and Evil - Defending S3 buckets and using them to attack. pentestarmoury.wordpress.com/2017/07/19/s3-…

Alexander Polce Leary and I got accepted to talk about SQL Server tricks DerbyCon :) It's awesome to be part of such a great event!

Here are the slides for Building Backdoors with WMI @Derbycon Thank you to everyone who came to the talk! slideshare.net/AlexanderLeary…

Here is the WMI Provider from the DerbyCon Building Better Backdoors with WMI: github.com/0xbadjuju/Wher…

Introducing the NetSPI SQL Injection Wiki! Our security consultants wanted everything they'd need to know about SQL Injections in one place and that's exactly what they created. Check it out: sqlwiki.netspi.com

The Official BloodHound Shirt is here! Buy a shirt today, get it shipped in time for BH/DC/BSides Vegas. ALL profits go directly to the Muscular Dystrophy Association! customink.com/fundraising/of…