Conference Talks

36C3 Lightning Talk

Geolocating users using Google API

HackInTheBox AbuDhabi Workshop

Windows infrastructure penetration testing

HackInTheBox AbuDhabi Armory

Network access uncontrolled

BalCCon-2019

Network Access Uncontrolled

BalCCon-2018

Hybrid Cloud Seeding

BalCCon-2017

One tool to rule them all


Blog - Medium

Hacking user location

Geolocate user with Google API


Blog - Alphadust

Ansible and Puppet Post Exploitation

Post exploitation of Ansible and Puppet

PPPOE Exploitation

Hacking ISP for free internet

Red Team Ratatouille

Building a bad usb mouse


Guides

Intelligenct Gathering

Contributor to Bitvijays Blog

Vulnerability Analysis

Contributor to Bitvijays Blog

Exploitation

Contributor to Bitvijays Blog

Post Exploitation

Contributor to Bitvijays Blog


Challenge write-up


Utilities

NAU Toolkit

Network Authentication Bypass Toolkit


Scripts

Azure AD Enum

Powershell script to enum Azure AD

MMC20 Remoting

Simple powershell script to laterally move with MMC20

CME Mass Command

Exploit multiple systems using CrackMapExec

Pwnsible

Lateral movement script for ansible environment

Pwnpet

Lateral movement script for puppet environment

Mongo NoAuth

Simple way to dump mongodb that has no authentication