https://github.com/hausec/hausec
https://github.com/hausec/hausec
Last synced: about 1 month ago
JSON representation
- Host: GitHub
- URL: https://github.com/hausec/hausec
- Owner: hausec
- Created: 2026-06-10T16:23:28.000Z (about 1 month ago)
- Default Branch: main
- Last Pushed: 2026-06-10T16:47:47.000Z (about 1 month ago)
- Last Synced: 2026-06-10T18:18:02.751Z (about 1 month ago)
- Size: 3.91 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
## Blog Posts
### Topic: AI & Agentic Security
* [Building Agentic C2 with Computer Use Agents](https://www.beyondtrust.com/blog/entry/claude-control-agentic-c2-computer-use-agent)
### Topic: Azure & Cloud Security
* [Azure Storage Account Attacks and Detections](https://hausec.com/2025/12/15/azure-storage-account-attack-and-detection/)
* [Azure Virtual Machine Execution Techniques](https://hausec.com/2022/05/04/azure-virtual-machine-execution-techniques/)
* [Abusing and Detecting Alternative Data Channel Command Execution on Azure Virtual Machines](https://hausec.com/2021/12/03/abusing-and-detecting-alternative-data-channels-and-managed-identities-on-azure-virtual-machines/)
* [PowerZure 2.1 Update](https://hausec.com/2021/12/21/powerzure-2-1-update/)
* [Attacking Azure & Azure AD, Part II](https://hausec.com/2021/10/26/attacking-azure-azure-ad-part-ii/)
* [AzureHound Cypher Cheatsheet](https://hausec.com/2020/11/23/azurehound-cypher-cheatsheet/)
* [Defense and Detection for Attacks Within Azure](https://medium.com/specter-ops-posts/detecting-attacks-within-azure-bdc40f8c0766)
* [Attacking Azure, Azure AD, and Introducing PowerZure](https://hausec.com/2020/01/31/attacking-azure-azure-ad-and-introducing-powerzure/)
### Topic: Active Directory & Kerberos
* [Kerberosity Killed the Domain: An Offensive Kerberos Overview](https://hausec.com/2020/03/10/kerberosity-killed-the-domain-an-offensive-kerberos-overview/)
* [BloodHound Cypher Cheatsheet](https://hausec.com/2019/09/09/bloodhound-cypher-cheatsheet/)
* [CypherDog Cheatsheet](https://hausec.com/2019/04/15/bloodhound-and-cypherdog-cheatsheet/)
* [Penetration Testing Active Directory, Part II](https://hausec.com/2019/03/12/penetration-testing-active-directory-part-ii/)
* [Penetration Testing Active Directory, Part I](https://hausec.com/2019/03/05/penetration-testing-active-directory-part-i/)
* [Active Directory Assessment and Privilege Escalation Script 2.0](https://hausec.com/2018/10/08/active-directory-assessment-and-privilege-escalation-script/)
* [Domain Penetration Testing: Using BloodHound, Crackmapexec, & Mimikatz to get Domain Admin](https://hausec.com/2017/10/21/domain-penetration-testing-using-bloodhound-crackmapexec-mimikatz-to-get-domain-admin/)
* [Domain Penetration Testing: Privilege Escalation via Group Policy Preferences (GPP)](https://hausec.com/2017/10/19/domain-penetration-testing-privilege-escalation-via-sysvol-share-on-domain-controller/)
* [Domain Penetration Testing: Credential Harvesting via LLMNR Poisoning](https://hausec.com/2017/10/19/domain-penetration-testing-credential-harvesting-via-llmnr-poisoning/)
* [Using Bloodhound to Map the Domain](https://hausec.com/2017/10/26/using-bloodhound-to-map-the-user-network/)
### Topic: Offensive Tradecraft
* [Cobalt Strike and Tradecraft](https://hausec.com/2021/07/26/cobalt-strike-and-tradecraft/)
* [Using a C# Shellcode Runner and ConfuserEx to Bypass UAC while Evading AV](https://hausec.com/2020/10/30/using-a-c-shellcode-runner-and-confuserex-to-bypass-uac-while-evading-av/)
* [Offensive Lateral Movement](https://hausec.com/2019/08/12/offensive-lateral-movement/)
* [Creating a Red & Blue Team Homelab](https://hausec.com/2021/03/04/creating-a-red-blue-team-home-lab/)
### Topic: Exploit Development & Privilege Escalation
* [Windows Privilege Escalation via Unquoted Service Paths](https://hausec.com/2018/10/05/windows-privilege-escalation-via-unquoted-service-paths/)
* [Simple Buffer Overflows (x32)](https://hausec.com/2018/04/02/simple-buffer-overflows-x32/)
* [Using ETERNALBLUE & DOUBLEPULSAR (Shadowbroker's Dump/NSA Tools)](https://hausec.com/2017/09/19/using-eternalblue-doublepulsar-shadowbrokers-dumpnsa-tools/)
* [How to set up Fuzzbunch (Shadowbroker's Dump/NSA Tools)](https://hausec.com/2017/09/19/how-to-set-up-fuzzbunch-shadowbrokers-dumpnsa-tools/)
* [How to get root privileges using dirtyc0w [the harder way]](https://hausec.com/2016/10/27/how-to-get-root-privileges-using-dirtyc0w/)
## Major Projects
| Name | Description|
|--------------|------------|
|[Azure Threat Research Matrix](https://aka.ms/atrm)| Azure-based tactics, techniques, and procedures matrix |
|[PowerZure](https://github.com/hausec/PowerZure)| PowerShell project created to assess and exploit resources within Microsoft’s cloud platform|
|[AzureHound](https://github.com/BloodHoundAD/Legacy-AzureHound.ps1)| Azure & Entra Component to BloodHound|
|[Active Directory & Privilege Escalation Script](https://github.com/hausec/ADAPE-Script)| Script to automate a bunch of pentesting tasks|
## Attributed CVEs
| CVE |
|--------------|
|CVE-2026-9258|
|CVE-2026-9259|
|CVE-2026-9260|
|CVE-2026-9261|
|CVE-2026-9262|
## Conference Talks
| Conference | Talk |
|--------------|------------|
| BSides Raleigh, SecureWorld Charlotte, & [Hybrid Identity Conference 2020](https://www.youtube.com/watch?v=MIt-tIjMr08)|[Attack]tive Directory: Compromising a Network in 20 Minutes Through Active Directory|
| DEFCON 34 | Wrestling with a Python: Escaping Copilot Studio's AI-Guarded Sandbox|