Let’s Go Phishing
Prism Infosec’s security consultant Kian J, provides a detailed account of a successful simulated phishing attack
No Shell? No Problem!
Enumerating internal networks via ssh-tunnels, Alexis V, November 2021 On a recent engagement, we were tasked to assess the security of an Secure File Transfer Protocol (SFTP) server. We were provided with a regular account to facilitate the file uploads, and so proceeded to work our way through the common checks. We tried to: Log […]