🎯 NTLM Attacks

Windows Authentication, Pass-the-Hash, Credential Dumping, Domain Security

Feeds to Scour
SubscribedAll
Scoured 9578 posts in 4.34 s
Bypass Windows user interface privilege isolation via the CTF input method proto
projectzero.google·1d·
Discuss: Hacker News
🔍NTLM Archaeology
Preview
Report Post
Fuzzing.in
fuzzing.in·12m
🐛Fuzzing
Preview
Report Post
LangChain core vulnerability allows prompt injection and data exposure
securityaffairs.com·4h
🌐DNS Security
Preview
Report Post
BankGPT TryHackMe Writeup Walkthrough
infosecwriteups.com
·17h
🏺Kerberos Archaeology
Preview
Report Post
**Build Secure JWT Authentication and Session Management System in Go with Redis**
dev.to·2d·
Discuss: DEV
🌳Archive Merkle Trees
Preview
Report Post
Need help with understanding how to setup secure remote access and consolidating DNS
reddit.com·14h·
Discuss: r/selfhosted
🌐DNS Security
Preview
Report Post
The 3 a.m. Call That Changed The Way I Design APIs
thenewstack.io·4h
👁️Observatory Systems
Preview
Report Post
Fake MAS Windows Activation Domain Used To Spread PowerShell Malware
it.slashdot.org·2d
🦠Malware Analysis
Preview
Report Post
Evasive Panda APT poisons DNS requests to deliver MgBot
securelist.com·3d
🌐DNS Security
Preview
Report Post
Cleartext Signatures Considered Harmful
gnupg.org·4h·
Discuss: Hacker News
✅Checksum Validation
Preview
Report Post
Tackling Unmaintainable Complexity with Automation: Building a Multi-Tenant SaaS Solo
ko-chan.github.io·6h·
Discuss: DEV
🔐Capability Systems
Preview
Report Post
Digital Forensics: Registry Analysis for Beginners, Part 1 – Hives, Logs, and Acquisition – Hackers Arise
hackers-arise.com·1d
🔍NTLM Forensics
Preview
Report Post
Summary of the USA federal government's zero-trust memo
bastionzero.com·9h·
Discuss: Hacker News
🛡Cybersecurity
Preview
Report Post
From Email to Exfiltration: How Threat Actors Steal ADP Login and Personal Data
cofense.com·4d
🔓Hacking
Preview
Report Post
Full Disclosure: Backdoor.Win32.ControlTotal.t / Insecure Credential Storage / MVID-2025-0702
seclists.org·4d
🎫Kerberos Exploitation
Preview
Report Post
The Frontend Auth Middleware: Cross-Origin Iframes Without Third-Party Cookies
seg6.space·2d·
Discuss: Hacker News
🌐WASI
Preview
Report Post
Teycir/Timeseal: Time-locked encryption vault with Dead Man's Switch. Send encrypted messages that unlock at a specific date or auto-release if you go silent. AES-256, split-key crypto, ephemeral seals. Perfect for crypto inheritance, whistleblowing, scheduled releases. Self-hostable.
github.com·7h·
Discuss: Hacker News
🔐Archive Encryption
Preview
Report Post
Network Programming
theworld.com·1d
📡Network Protocol Design
Preview
Report Post
A Practical Guide to SafeLine: Setting Up a WAF and Testing It With a Real SQL Injection Attack
infosecwriteups.com
·2d
🌐DNS Security
Preview
Report Post
Fake MAS Windows activation domain used to spread PowerShell malware that infect Windows systems with "Cosmali Loader"
bleepingcomputer.com·3d·
Discuss: Hacker News, r/Piracy, r/technews
🦠Malware Analysis
Preview
Report Post