Search titles only
By:
Home
Members
Moderators
Current visitors
Escrow
Deposit
Account Upgrades
ADS
Help
WMIX.TO
Komplexes Bot
Log in
Register
What's new
Search
Search titles only
By:
Menu
Log in
Register
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Depov's latest activity
Depov
posted the thread
Hidden C2 Data Channels: DNSing Tuning and HTTP Clitt Points from Customization to Detect
in
Web
.
At red team, operations in the financial sector, we raised dnscat2 on the rented VPS, prescribed the NS delegation and chased the teams...
Jun 12, 2026
Depov
posted the thread
Segmentation and protection of OT networks: Purdue Model, Industrial DMZ and Zero Trust for ICS
in
Programming
.
At the audit of the petrochemical plant last year, we found Modbus/TCP traffic from the Siemens S7-1200 and HMI panels in the same VLAN...
Jun 12, 2026
Depov
posted the thread
Steganography in malware: how APT-groups hide C2-channels and peloads in images
in
Programming
.
When the Zero.T bootloader downloaded three BMP files from a C2 server, the corporate DPI system missed them without a single alert...
Jun 12, 2026
Depov
posted the thread
Attacks through stolen account details: kill chain from styler log to domain admin
in
Programming
.
For the past year, I have been dismantling the dumps of infostlers - archives from Telegram channels and log marketplaces - and in each...
Jun 11, 2026
Depov
posted the thread
Pentest ICS TP: kill chain from the corporate network to the controller registers
in
Web
.
At the petrochemical facility in 2024, the task was specifically: to check whether the attacker from the corporate network will get to...
Jun 11, 2026
Depov
posted the thread
Bcrypt Breaking Passwords: How Hashes with Dragonica Are Leaked and Why It’s Easier Than It Seems
in
Programming
.
At the CTF last year, the dump of the database of the private server Dragonica appeared - about 40 thousand accounts, bcrypt-hashi with...
Jun 10, 2026
Depov
posted the thread
Cloud imconfiguration as a vector of attack: a complete map of threats and protection of AWS, Azure and GCP
in
Web
.
99% of cloud security incidents are the fault of the client, not the provider. This is Gartner (Through 2025, original publication...
Jun 10, 2026
Depov
posted the thread
Zero Trust Network Microshenement: a Practical Guide to Implementation
in
Web
.
In three of the five microsegmentation projects that I have audited over the past year and a half, within the created segments there was...
Jun 9, 2026
Depov
posted the thread
Ransomware in 60 minutes: how Akira and Medusa/Storm-1175 accelerated attacks and how to detect them
in
Programming
.
According to CrowdStrike Global Threat Report 2025, the average time of the lateral movement after initial access in 2024 is 62 minutes...
Jun 9, 2026
Depov
posted the thread
Detection of APT attacks: SIEM, EDR, NDR and Threat Hunting – full protection map in 2026
in
Programming
.
Business logic of APT: why the attacker stays in the network for months Before dismantling detection tools, it is necessary to...
Jun 9, 2026
Depov
posted the thread
Information Security Maturity Models: CMMC, C2M2, SSE-CMM and BSIMM – selection of framework and self-assessment
in
Web
.
In three years, I have conducted a gap analysis on four different maturity models for twelve organizations – from Defense Industrial...
Jun 8, 2026
Depov
posted the thread
SAML Authentication Attacks: XML Signature Wrapping, Golden SAML and bypassing the federal SSO
in
Web
.
SAML-Floy through the eyes of an attacker For the SAML pencilator, there is a trust chain between three participants: User's browser...
Jun 5, 2026
Depov
posted the thread
Bypassing ML detectors to IDS: adversarial-attacks and testing the robustness of models
in
Web
.
How IDS ML Detectors Make Traffic Decisions The ML-based NIDS operates on a three-stage pipeline. Understanding each step is critical...
Jun 5, 2026
Depov
posted the thread
Modern methods of bypassing WAF in tasks with non-standard XSS
in
Web
.
Эволюция XSS и современные защиты Most likely, you already know what XSS is, but let’s repeat for the completeness of the picture. XSS...
Jun 5, 2026
Depov
posted the thread
Bypass Secure Boot: attack techniques for the verification of the loader for the pentesters
in
Programming
.
On the Red Team project last year, the task sounded the following task: to prove persistence below the OS level on the host with Windows...
Jun 5, 2026
Top
Bottom
