Blog improvements
When I started this blog in 2007 (wow that’s almost 10 years ago) I went for a cheap web hoster with a …
Security
Shodan, search engine for IoT or hackers delight?
Today I stumbled upon Shodan, a search engine for devices and services. I decided to search for Citrix and …
Dumping passwords in a VMware .vmem file
Benjamin Delpy the author of the well known mimikatz toolkit has released a very cool extension to WinDbg …
Scriptable Citrix Password Encoder
A while ago I published a tool to Encode and Decode Citrix passwords. Today I am publishing a small update to …
Java has discovered application components that could indicate a security concern
When starting a particular web based application Java popped up the following dialog: The dialog asks us if we …
DefaultPassword Dumper
Just a small post today: a small commandline utility that reads the “DefaultPassword” LSA secret. …
Bypassing RES/Appsense Application Security
The video below shows a Proof of Concept of bypassing Application Security in RES Workspace Manager . Please …
Settings NTFS Permissions by SID in PowerShell
I am currently creating a PowerShell script that creates a user with all needed Active Directory attributes, …
Cross-Site Scripting Vulnerability in Citrix Web Interface
from CTX127541: A cross-site scripting vulnerability has been identified in specific versions of Citrix Web …