Month: November 2024

After a recent engagement, I was asked to put together a short demo to explain how easy it is/was to steal a disconnected RDP session once local administrator privileges have been obtained. In this demo video you can see that access to a file server has been obtained as local administrator and that there isContinue reading Local Admin + Disconnected RDP Sessions

Quite a few months ago I performed a laptop build review, standard stuff, see what opportinities there are to escalate privileges and breakout of what was supposed to be a secure build. After reviewing all the common techniques and vulnerabilities, one of the areas I chose to dive into which proved worthwhile was Microsoft SoftwareContinue reading Living off the land