Domain Takeovers
Information on how specific services protect (or don’t) against domain takeovers (DTO)
How to Guides
A collection of learning resources for increasing one’s knowledge.
This section will always be a WIP. If you notice an error in any of this content, please let me know via an issue on GitHub (or correct it using a pull request).
Thanks!
Phishing Credential Harvesting and Beyond
Learn how to phish using payloads and credential harvesting with TFA interception.
Pentest Engagement Handbook
A tool-by-tool walkthrough of how I run an external network/web pentest by hand — the same workflow Arsenic automates.
Use Yubikey With KeePassXC
A useless page that needs to be updated or deleted.
Use AWS Credentials Stored in KeePassXC
How to setup and use AWS credentials stored in KeePassXC