Entrypoint is an offensive security conference in Paris on 19 & 20 March 2027: two days of talks and four days of hands-on trainings on Red Teaming, initial access, Active Directory compromise, supply...

YouTube video by TrendAI Zero Day Initiative

YouTube video by Synacktiv

Uncovering the protection mechanisms provided by modern Windows security features and identifying new methods for credential dumping.

The Phantom Extension: Backdooring chrome through uncharted pathways

DCOM lateral movement BOF using Windows Installer (MSI) Custom Action Server - install ODBC drivers to load and execute DLLs

While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise ...

Introduction Posture checks are a key component of zero trust architectures.

While I was reading Elad Shamir recent excellent post about NTLM relay attacks, I decided to contribute a companion piece that dives into the mechanics of Kerberos relays, offering an analysis and …