Esther Matut
Introduction to Proving Grounds
The Proving-Grounds offers both free and paid tier levels, where users can test their skills in a lab environment similar to other platforms
top of page
Search
Erica Zelic
- Jul 25
- 5 min
Playing with Bubbles: An Introduction to DLL-Sideloading
DLL Side-Loading is a pervasive technique partially because its behavior is difficult to detect. As a sub-technique of DLL Hijacking, it ta
Erica Zelic
- Jul 5
- 6 min
LDAP Queries for Offensive and Defensive Operations
The intention of this post is to provide basic queries for targeted AD DS information gathering used in penetration testing. The reader can
Fred Mastrippolito
- Feb 1
- 3 min
Enhancing Digital Forensics with X-Ways X-Tensions: VirusTotal Plugin
Polito is pleased to release our VirusTotal extension for X-Ways. This open source extension is useful to quickly triage file hashes
Fred Mastrippolito
- Jan 31, 2022
- 2 min
Introducing Hash Exporter for X-Ways: Automate Your Hash Lists
Polito Inc. is pleased to announce that we are releasing the Hash Exporter extension for X-Ways. Hash Exporter helps automate hash extract
Nihaal Prasad
- Oct 5, 2021
- 6 min
Return to Libc: Linux Exploit Development
This blog post will cover how to conduct a ret2libc attack. The ret2libc technique is a tactic used in Linux exploit development that allows
Nihaal Prasad
- Aug 10, 2021
- 7 min
How to go Phishing with Gophish
How to conduct basic phishing campaigns using Gophish, an open-source tool for testing an organization’s vulnerability to phishing.
Daniel Chen
- Aug 5, 2020
- 3 min
Enhancing Digital Forensics with X-Ways X-Tensions: Metadefender Plugin
To start, you’ll need your MetaDefender Cloud API key ready. You can sign up for MetaDefender’s free API key at opswat.com. You can downloa
Mattia Campagnano & Wade Ma
- Jul 14, 2020
- 9 min
Vulnerability Scanners and the SAINT Experience
Vulnerability scanners assist in the identification and detection of vulnerabilities arising from misconfigurations or insecure coding with
Mattia Campagnano
- May 20, 2020
- 6 min
Weaponizing Windows Binaries and Scripts (LOLBAS): What's Old Is New Again
One of the latest trends in penetration testing and malware development is to weaponize the so-called Living Off the Land Binaries and Scrip
Wade Ma
- Mar 3, 2020
- 9 min
Automated Obfuscation of Windows Malware and Exploits Using O-LLVM
Today’s malware authors and exploit developers have automated methods of obfuscating their software, When these techniques are combined with
Liana Parakesyan
- Feb 21, 2019
- 4 min
Using Intezer Analyze to Reveal Malware Ancestry and Assist IR and Forensic Investigations
Today, much of the malware still operates via the same concept of infecting machines and spreading throughout networks. Due to this, it only
Admin
- Feb 5, 2018
- 11 min
How to Build Your Own DNS Sinkhole and DNS Logs Monitoring System
While Pi-hole includes a nice web-based admin interface, I started to experiment with shipping its dnsmasq logs to the Elastic (AKA ELK) sta
Polito, Inc.
- Oct 3, 2017
- 2 min
BurpSuite Yara Plugin
*This blog entry was originally published on January 29, 2016 on the original Polito Blog by Ian Duffy. It was re-posted on October 3,...
Ian Duffy
- Jan 29, 2016
- 2 min
BurpSuite Yara Plugin
Wouldn't it be cool if we could use Yara in this situation to help identify pages that contained malicious content? We set out to write
bottom of page