🎯 NTLM Attacks

Windows Authentication, Pass-the-Hash, Credential Dumping, Domain Security

Windows Hello for Business – The Face Swap
insinuator.net·11h
🏺Kerberos Archaeology
RFC 7711 - PKIX over Secure HTTP (POSH)
datatracker.ietf.org·2d
🌐DNS Security
SSH-Passkeys: Leveraging Web Authentication for Passwordless SSH
arxiv.org·20h
🔐PKI Archaeology
Google Wifi Pro: Glitching from Root to EL3: Part 1 - Characterization
raelize.com·58m·
Discuss: Lobsters, Hacker News
🛡️eBPF Security
TREVORspray – Credential Spray Toolkit for Azure, Okta, OWA & More
darknet.org.uk·1d
🌐DNS Security
You Can’t Make This Stuff Up
irreal.org·8h
🔓Hacking
Fileless DPAPI Credential Extraction With PowerShell
infosecwriteups.com·1d
🔍NTLM Archaeology
How to test LUKS passphrase on specific key slot
sleeplessbeastie.eu·1d
🔒Hardware Attestation
CVE-2025-4919: Corruption via Math Space in Mozilla Firefox
thezdi.com·10h
🦀Rust Verification
Implementing Basic Authentication in FastAPI
dev.to·6h·
Discuss: DEV
🌐Network Protocols
Hackers are abusing 'FileFix' technique to drop RATs during ransomware attacks
techradar.com·11h
🔓Hacking
Machine Code Isn't Scary
jimmyhmiller.github.io·1d
🔤Character Encoding
Sharing an OMV folder across VLANs, how vulnerable would this be?
i.redd.it·1d·
Discuss: r/homelab
💿Proxmox HA
U.S. CISA adds Wing FTP Server flaw to its Known Exploited Vulnerabilities catalog
securityaffairs.com·48m
🔓Hacking
Micropatches Released for "WSPCoerce" Coerced Authentication via Windows Search Protocol (NO CVE/WONTFIX)
blog.0patch.com·5d·
Discuss: blog.0patch.com
🔍NTLM Archaeology
Does DNS Security Matter?
systemsapproach.org·1d
🌐DNS Security
Critical UEFI vulnerabilities found in Gigabyte motherboards — allow attackers to bypass Secure Boot and install firmware backdoors
tomshardware.com·10h
🔒Secure Boot
Pre-Auth SQLi to RCE – Fortinet FortiWeb Fabric Connector (CVE-2025-25257)
labs.watchtowr.com·18h·
Discuss: Hacker News
🛡️CBOR Security
Windows 11's Administrator Protection improves security but may get on your nerves quickly
ghacks.net·10h
🛠System administration
A defender’s guide to initial access techniques
redcanary.com·1d
🎯Threat Hunting