Home - JEREMY CATELAIN

Publication

AD & Azure security | Risks related to the DNSAdmins group

In this article, we will explore the risks associated with the DNSAdmins group and why this group should be managed with great caution. This article is the first of a series dedicated to Active Directory and Azure security. The aim of these articles will be to raise awareness about topics where, during discussions or previous assessments, I have observed that many people were unaware of the associated risks...

Active Directory & Azure security

Launching of a new personnal project on the Active Directory and Azure security. The aim of this project will be to raise awareness about topics where, during discussions or previous assessments, I have observed that many people were unaware of security best practives or bad practices related to Active Directory or Azure security

SLAE32 | Assignment 7 - Crypter

Description of the assignment

Create a custom crypter like the one shown in the “cryp ters” video
Free to use any existing encryption schema
Can use any programmming language

This blog post has been...

SLAE32 | Assignment 6 - Polymorph

Description of the assignment

Take up at least 3 shellcodes from shell-Storm and create a polymorphic versions to beat the pattern matching
The polymorphic version cannot be larger than 150% of the existing shellcode
Bonus points for making it shorter in length than the original

As follows the list of shellcodes that we are going to change into polymorphic ones:

downloadexec
...

SLAE32 | Assignment 5 - Msfpayload

Description of the assignment

Take up at least 3 shellcode samples created using Msfpayload for linux/x86
Use GDB/NDisasm/Libemu to dissect the functionality of the shellcode
Present your analysis

We are going to analyse together the following shellcodes:

linux/x86/adduser
...

SLAE32 | Assignment 4 - Encoder

Description of the assignment

Create a custom encoding scheme like the “Insertion Encoder” we showed you;
PoC with using execve-stack as the shellcode to encode with your schema and execute

This blog post has been...