The newly discovered BLISTER malware loader leverages valid code signing certificates to evade detection. Consequently,… New BLISTER Malware Loader Exploits Valid Code Signing Certificate on Latest Hacking News. click here to read full Article...
Security researchers have checked the web’s public key infrastructure and have measured a long-known but little-analyzed security threat: hidden root Certificate Authorities. click here to read full Article Read More on latest vulnerability and...
Domain persistence techniques enable red teams that have compromised the domain to operate with the highest level of privileges in a large period. One of… Continue reading → Golden Certificate click here to read...
[*] Certipy is a Python tool to enumerate and abuse misconfigurations in Active Directory Certificate Services (AD CS). Based on the C# variant Certify from @harmj0y and @tifkin_. Installation $ python3 setup.py install Remember...
[*] Certify is a C# tool to enumerate and abuse misconfigurations in Active Directory Certificate Services (AD CS). @harmj0y and @tifkin_ are the primary authors of Certify and the the associated AD CS research...
PowerShell toolkit for auditing Active Directory Certificate Services (AD CS). It is built on top of PKISolution‘s PSPKI toolkit (Microsoft Public License). This repo contains a newer version of PSPKI than what’s available in...
In yet another instance of software supply chain attack, unidentified hackers breached the website of MonPass, one of Mongolia’s major certificate authorities, to backdoor its installer software with Cobalt Strike binaries. click here to...
Subcert is a subdomain enumeration tool, that finds all the valid subdomains from certificate transparency logs. Setup Step 1: Install Python 3 apt-get install python3-pip Step 2: Clone the Repository git clone https://github.com/A3h1nt/Subcert.git Step...
In an incident report published on Friday, Google said that a Google Voice outage affecting a majority of the telephone service’s users earlier this month was caused by expired TLS certificates. Click here for...
A Mimecast-issued certificate used to authenticate some of it’s products to Microsoft 365 Exchange Web Services has been “compromised by a sophisticated threat actor,” the company has announced. Click here for image source link...
Image and Article Source link Mimecast disclosed a security incident in which a sophisticated threat actor has managed to get one of its digital certificates and abused it to gain access to some of...
