Slack Watchman
About Slack Watchman is an application I have created to search through Slack workspaces and look for sensitive information posted in public chats/channels. This information is then returned to you in the form of CSV files. You can find the project on GitHub here With the whole environment moving
Tradecraft
It seems strange to talk about normal right now considering that, at the time of writing, a lot of the world is under quarantine. Yet in security, normal is something that is important to know. When creating alerts or analysing logs, you want to be notified when something is not
Lil Pwny
💡This post is partially out of date, and should be read in combination with the version 2.0.0 release notes Now that we have our data from Active Directory, it is time to use Lil Pwny to audit the passwords. Getting Ready Installing Lil Pwny is simple from PyPI:
Lil Pwny
The first step in auditing passwords using Lil Pwny is to recover the passwords from Active Directory. Passwords in a Windows Domain Before we look at how to recover passwords, it is useful to know how Windows handles and stores passwords in general. Windows uses the NTLM (New Technology LAN
Lil Pwny
💡This post is partially out of date, and should be read in combination with the version 2.0.0 release notes About Lil Pwny is an application I created to check passwords from Active Directory against the list of compromised passwords from Have I Been Pwned, the collection of real