Our Blog

InvokeADCheck – A PowerShell Module for Assessing Active Directory

Reading time: ~5 min
Posted by niels.hofland@orangecyberdefense.com on 06 March 2025
Categories: Active directory, Automation, Powershell, Tool
Introduction During an Active Directory (AD) assessment, I found myself struggling with a collection of individual PowerShell scripts and their...

ACE to RCE

Reading time: ~20 min
Posted by Justin Perdok on 24 July 2020
Categories: Acl, Active directory, Powershell, Genericwrite, Rcm
tl;dr: In this writeup I am going to describe how to abuse a GenericWrite ACE misconfiguration in Active Directory to...

Resurrecting an old AMSI Bypass

Reading time: ~11 min
Posted by Philippe Vogler on 24 June 2020
Categories: Amsi, Bypass, Powershell
While working on DoubleAgent as part of the Introduction To Red Teaming course we’re developing for RingZer0, I had a...

MAPI over HTTP and Mailrule Pwnage

Reading time: ~8 min
Posted by etienne on 01 September 2016
Categories: Pentest, Powershell, Reversing, Tools
History In December 2015 Silent Break Security wrote about “Malicious Outlook Rules” and using these to get a remote shell....

Bringing the hashes home with reGeorg & Empire

Reading time: ~4 min
Posted by sara on 11 February 2016
Categories: Empire, Post-exploitation, Powershell
Is not a hack until you are 3 tunnels deep – Ian de Villiers External assessments. It’s about not only...