Penetration Test

Tagged

A collection of 3 posts

Using NVIDIA's leaked certificate to improve anti-kill

Quick little article on how to leverage Nvidia's certificates to lower payload detection in unsophisticated environments. Your implants definitely shouldn't rely on this technique. However, it's nice to see the detection difference from VirusTotal. Little back story on this. In early 2022 Lapsus$ group leaked a bunch of Nvidia's internal

ATM Hacking

ATM/Kiosk Hacking

Solving the ATM/Kiosk hacking challenges from Positive Hack Days Payment Village.

Penetration Test

From Default Printer Credentials to Domain Admin

The tail of a Xerox pass-back-attack. How to exploit trust relationships between devices that are generally considered benign.