Security Blog

Cybersecurity knowledge and tools from the Praetorian team.

Viewing articles by

Network in Enterprise Security

Reproducing the Microsoft Exchange Proxylogon Exploit Chain

by Anthony Weems and Dallas Kaman and Michael Weber on March 9, 2021

Introduction In recent weeks, Microsoft has detected multiple 0-day exploits being used to attack on-premises versions of Microsoft Exchange Server in a ubiquitous global attack. ProxyLogon is the name given to CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker to bypass authentication and impersonate users. In the attacks observed, threat actors used […]

Read Article

Cloud in Tools & Techniques
Google Cloud IAM: Designs for Self-Service Privilege Escalation
May 04, 2021
Red Teaming in Tools & Techniques
Red Team Tooling: Writing Custom Shellcode
April 08, 2021
Software in Security Insights
Attacking and Defending OAuth 2.0 (Part 2 of 2: Attacking OAuth 2.0 Authorization Servers)
March 16, 2021
Network in Security Insights
How to Prevent, Detect and Remediate ProxyLogon
March 15, 2021
Network in Enterprise Security
Red Team Privilege Escalation – RBCD Based Privilege Escalation – Part 2
March 11, 2021
Network in Enterprise Security
NIST Cybersecurity Framework Vignettes: Backups
March 02, 2021
Enterprise IT in Security Insights
The Elephant in the Room: Why Security Programs Fail
February 22, 2021
Network in Enterprise Security
Red Team Local Privilege Escalation – Writable SYSTEM Path Privilege Escalation – Part 1
February 09, 2021
Network in Security Insights
A simple and effective way to detect Broadcast Name Resolution Poisoning (BNRP)
January 05, 2021

Security Blog

Reproducing the Microsoft Exchange Proxylogon Exploit Chain

Google Cloud IAM: Designs for Self-Service Privilege Escalation

Red Team Tooling: Writing Custom Shellcode

Attacking and Defending OAuth 2.0 (Part 2 of 2: Attacking OAuth 2.0 Authorization Servers)

How to Prevent, Detect and Remediate ProxyLogon

Red Team Privilege Escalation – RBCD Based Privilege Escalation – Part 2

NIST Cybersecurity Framework Vignettes: Backups

The Elephant in the Room: Why Security Programs Fail

Red Team Local Privilege Escalation – Writable SYSTEM Path Privilege Escalation – Part 1

A simple and effective way to detect Broadcast Name Resolution Poisoning (BNRP)

We don't support Internet Explorer