PBKDF i bcrypt
One way to store passwords provided by users is through the use of hash functions. In this case, the input provided, for example, during user registration, is processed by the…
Unshade · 5 min read
Blog and news
Research, vulnerability write-ups, guides and news from the team.
How to Bypass AMSI? My Experience with PowerShell Bypassing
Whether it's on HackTheBox, at work, or just for fun, sometimes you need to infect a Windows system with some C2 software or malware. In my case, I most often use CobaltStrike…
Unshade · 5 min read
Bcrypt Cocktail and Hash Extraction
TL;DR - Combining bcrypt with other unsalted hash functions (such as MD5 or SHA-1) can lead to serious consequences in the form of "extraction" of bcrypt. However, it is still…
Unshade · 7 min read
Sacrificial session
How many times you have run into the problem of replacing the current user Kerberos TGT? Creating the sacrificial process is the way to prevent that from happening. If the current…
Unshade · 7 min read
Hash function
A hash function is an algorithm that transforms an input of arbitrary length into an output of fixed length.
Unshade · 3 min read