KEDA audit by 7ASecurity
7ASecurity shares results of a KEDA security audit: 15 security-impact findings (4 high), 5 hardening recommendations, SLSA supply-chain review, and future security guidance.
The Security Guide To WebDAV Servers And Exposed Methods
What Is a WebDAV Server? How It Works, Use Cases, and Security Risks A WebDAV server lets users access and manage files over HTTP or HTTPS. It supports remote workflows such as document editing, collaboration, and legacy publishing. Now, WebDAV isn’t automatically unsafe. It becomes a risk when exposed methods, weak authentication, broad permissions, or …
Iframe XSS: postMessage, CSP, Sandboxing, & Clickjacking
Iframe XSS Explained: Trust Boundaries, Messages, and Embedded Content Iframe XSS isn’t one single bug class. It can refer to XSS inside framed content, unsafe srcdoc, user-controlled iframe sources, weak postMessage handling, over-trusted widgets, or parent pages that trust child frames too much. The fix starts with trust boundaries: control iframe sources, sandbox untrusted content, …
Diamond Ticket vs Golden Ticket: Why Your SOC is Blind
A Diamond Ticket attack is a parasitic cryptographic forgery. It hijacks a legitimate Windows authentication flow. This grants an attacker stealthy, long-term access to your network. Unlike Golden Tickets, which are built from scratch and easily flagged by missing request logs, or Silver Tickets, which are limited to specific services, a Diamond Ticket modifies a …
We Audited Legacy WMIC Commands (Our Defensive Guide)
The removal of WMIC commands changes how you manage Windows, but the underlying security risks haven't gone away. While Microsoft has retired the old wmic.exe tool, the WMI system itself remains a primary target for fileless attacks and stealthy persistence. This guide provides essential translations to migrate your legacy WMIC tasks to secure PowerShell CIM …
Your Guide to Finding and Protecting the NTDS.dit Location
The NTDS.dit location is the primary target for any hacker looking to take total control of your organisation. This file is the central database for Active Directory. It contains every user account, group membership, and the encrypted password hashes for your entire domain. While the default file path (C:\Windows\NTDS\ntds.dit) is well-known, modern threat actors use …
Stop Hackers Abusing AD Explorer in Your Corporate Network
AD Explorer is an advanced admin tool used to manage and fix Active Directory databases. Yet, its powerful snapshot feature also helps attackers download your entire directory structure to analyse offline. Once the directory is extracted, hackers feed this data into graph tools like BloodHound to map paths to Domain Admin without triggering network alarms. …
The 2026 Guide to NTLM Hash Security and Kerberos Migration
An NTLM hash is the mathematical version of a password that Windows uses for legacy authentication. For years, the security industry has known that older versions of this system were broken. Now, the 2025 and 2026 security baselines target the death of the entire NTLM stack, including NTLMv2. Microsoft is pushing companies to use Kerberos …
Stop Kerberoasting: Our Advanced Threat-Hunting Blueprint
Modern Kerberoasting detection has moved far beyond watching for bulk ticket requests. In 2026, sophisticated threat actors use targeted requests to blend seamlessly into normal network traffic. With Microsoft’s mandatory move to AES-256, defenders must focus on advanced KQL queries and specific bitmask signatures in Event ID 4769. Tactical Identity Defense: Mastering Kerberoasting Detection in …
Ouinet audit by 7ASecurity
About Ouinet Ouinet is a suite of free, open source software tools and infrastructure that provides access to the open internet in repressive information contexts with limited or no connectivity. Ouinet works through a network of cooperating nodes or servers, using peer-to-peer routing, and the distributed data storage of users’ internet activity. Ouinet is a core …
