w0rk3r's Windows Hacking Library

Hunting the Delegation Access https://www.notsosecure.com/hunting-the-delegation-access @WindowsHackingLibrary

Writing a Hyper-V “Bridge” for Fuzzing — Part 1: WDF http://www.alex-ionescu.com/?p=377 @WindowsHackingLibrary

Being a Good Domain Shepherd: Part 2 https://posts.specterops.io/being-a-good-domain-shepherd-part-2-5e8597c3fe63 @WindowsHackingLibrary

Being a Good Domain Shepherd https://posts.specterops.io/being-a-good-domain-shepherd-57754edd955f @WindowsHackingLibrary

Bypassing Crowdstrike Falcon detection, from phishing email to reverse shell https://0x00sec.org/t/bypassing-crowdstrike-falcon-detection-from-phishing-email-to-reverse-shell/10802 @WindowsHackingLibrary

COM XSL Transformation: Bypassing Microsoft Application Control Solutions (CVE-2018-8492) https://bohops.com/2019/01/10/com-xsl-transformation-bypassing-microsoft-application-control-solutions-cve-2018-8492 @WindowsHackingLibrary

Bypassing Palo Alto Traps EDR Solution https://www.c0d3xpl0it.com/2019/01/bypassing-paloalto-traps-edr-solution.html @WindowsHackingLibrary

Cobalt Strike 3.13 – Why do we argue? https://blog.cobaltstrike.com/2019/01/02/cobalt-strike-3-13-why-do-we-argue @WindowsHackingLibrary

Malicious use of Microsoft LAPS https://akijosberryblog.wordpress.com/2019/01/01/malicious-use-of-microsoft-laps @WindowsHackingLibrary

zBang is a risk assessment tool that detects potential privileged account threats Blog: https://www.cyberark.com/threat-research-blog/the-big-zbang-theory-a-new-open-source-tool Tool: https://github.com/cyberark/zBang @WindowsHackingLibrary

OT Network Attack Demonstration https://ijustwannared.team/2018/12/27/ot-network-attack-demonstration @WindowsHackingLibrary

Tampering with Windows Event Tracing: Background, Offense, and Defense https://medium.com/palantir/tampering-with-windows-event-tracing-background-offense-and-defense-4be7ac62ac63 @WindowsHackingLibrary

Abusing WMI Providers for Persistence https://www.slideshare.net/mobile/PhilipTsukerman/abusing-wmi-providers-for-persistence-bsidestlv @WindowsHackingLibrary

The Component Object Model https://docs.microsoft.com/en-us/windows/desktop/com/the-component-object-model @WindowsHackingLibrary

Story of my two (but actually three) RCEs in SharePoint in 2018 https://soroush.secproject.com/blog/2018/12/story-of-two-published-rces-in-sharepoint-workflows @WindowsHackingLibrary

SharpNado - Teaching an old dog evil tricks using .NET Remoting or WCF to host smarter and dynamic payloads https://blog.redxorblue.com/2018/12/sharpnado-teaching-old-dog-evil-tricks.html @WindowsHackingLibrary

Hacking into Palo Alto Networks support site for fun and... no attribution? https://www.craigdods.com/hacking-into-palo-alto-networks-support-site-for-fun-and-no-attribution @FromZer0toHero

A 9-step recipe to crack a NTLMv2 Hash from a freshly acquired .pcap https://research.801labs.org/cracking-an-ntlmv2-hash @WindowsHackingLibrary

Windows: VBScript execution policy bypass via MSXML https://bugs.chromium.org/p/project-zero/issues/detail?id=1669 @WindowsHackingLibrary

Kerberoasting - From setup to cracking https://medium.com/@markmotig/kerberoasting-from-setup-to-cracking-3e8c980f26e8 @WindowsHackingLibrary