Raiding Unraid: XSS to Hypervisor Takeover
Chaining a stored cross-site scripting vulnerability in the Unraid web GUI into full hypervisor host takeover.
ALittleInsecure
An Offensive Security Blog
Latest posts
Files that Coerce: Search Connectors and Beyond
Abusing Windows file formats like search connectors and library files to coerce forced authentication and relay it across Active Directory.
DNS Hijacking: Say My Name
Techniques for taking over and manipulating Windows DNS records without credentials to coerce and relay NTLM and Kerberos authentication.