Penetration Testing skills

Detecting NTLM Relay

mukul975

Identify NTLM relay attacks through event correlation.

Hunting for DCOM Lateral Movement

mukul975

Detect DCOM abuse for enhanced cybersecurity.

Escaping Containers to Host

mukul975

Break out of containers during security assessments.

Mapping Attack Paths with BloodHound CE

mukul975

Analyze Active Directory and Entra ID attack paths efficiently.

Operating Sliver C2

mukul975

Deploy and manage Sliver C2 for red-team engagements.

Assessing Vector Weaknesses

mukul975

Evaluate security risks in RAG vector stores.

Auditing Kubernetes RBAC Privilege Escalation

mukul975

Identify and remediate RBAC vulnerabilities in Kubernetes clusters.

Emulating Cloud Attacks

mukul975

Validate cloud security detections with real attack simulations.

Auditing Entra ID

mukul975

Perform authorized security assessments on Microsoft Entra ID.

Abusing DPAPI for Credential Access

mukul975

Extract and decrypt Windows DPAPI-protected secrets efficiently.

Exploiting AD CS with Certipy

mukul975

Leverage Certipy for AD CS vulnerability assessments.

M

Moving Laterally with NetExec

mukul975

Streamline lateral movement during penetration tests.

Social Engineering Penetration Test

mukul975

Assess human vulnerabilities with simulated attacks.

Exploiting AWS with Pacu

mukul975

Streamline AWS penetration testing with Pacu.

Building Red Team C2 Infrastructure

mukul975

Deploy and manage Havoc C2 for red team operations.

Abusing Shadow Credentials for Privilege Escalation

mukul975

Take over Active Directory accounts stealthily using shadow credentials.

Authenticated Scan with OpenVAS

mukul975

Perform deep vulnerability scans using OpenVAS with credentials.

Coercing Authentication

mukul975

Trigger machine account authentication for security testing.

Exploiting Constrained Delegation Abuse

mukul975

Leverage Kerberos misconfigurations for security testing.

Conducting Domain Persistence with DCSync

mukul975

Execute DCSync attacks for domain persistence testing.

Detecting Mobile Malware Behavior

mukul975

Analyze and detect malicious behavior in mobile applications.

Exploiting noPac CVE-2021-42278/42287

mukul975

Escalate privileges in Active Directory environments securely.

Conducting Internal Reconnaissance

mukul975

Utilize BloodHound CE for Active Directory analysis.

Building C2 Infrastructure

mukul975

Deploy and harden a Sliver C2 server for red team operations.