Funnymak3r

windows

  • Dumping LSASS with bypassing ASR defense mechanism

    Intro Recently, I had a conversation about the Local Security Authority Subsystem Service (LSASS) process and its protection mechanisms. This inspired me to dig deeper into the topic and write this post, focusing on LSASS credential dumping and the various Windows protection mechanisms against it. I will not write a full description of LSASS here,…

    Read more: Dumping LSASS with bypassing ASR defense mechanism

    .

    Funnymaker

  • HTB Walkthrough, SolarLab Windows

    Introduction Welcome to an in-depth walkthrough of how I successfully compromised “solarlab.htb,” a Windows machine on the HackTheBox platform. This exercise involved a variety of techniques, from initial reconnaissance, exploit existable vulnerability in Reportlab python library and going to privilege escalation with demonstrating a comprehensive approach. This blog post aims to provide a detailed and…

    Read more: HTB Walkthrough, SolarLab Windows

    .

    Funnymaker

  • NTLM authentication & Responder, HOW IT WORKS

    Hi there, today’s talk about the responder tool. Beforehand I want to inform you that in this topic I will discuss the basics too. First of all we should deep dive into the NTLM user authentication process in the Windows environment. Let’s break down the basics of it. Windows doesn’t store your user account password…

    Read more: NTLM authentication & Responder, HOW IT WORKS

    .

    Funnymaker