A place for blogging and scripting https://chrismaddalena.github.io Sniffing out password reuse - BloodHound is a fantastic tool for analyzing Active Directory, but that’s really just the beginning. The BloodHound database is a resource that enables users to execute all sorts of queries – the only limit is your creativity. In this case study, the SpecterOps team used BloodHound to assist with an... Wed, 17 Apr 2019 00:00:00 -0400 https://chrismaddalena.github.io/2019-04-17-password-analysis-with-bloodhound/ https://chrismaddalena.github.io/2019-04-17-password-analysis-with-bloodhound/ An Adventure in Constructing a Ghostbusters Proton Pack - I recently completed my Ghostbusters ghost trap and decided to begin tackling a project I always wanted to do, my proton pack. Warning! This is a verbose write-up that walks through everything I thought and did. It was written over multiple days as I actually did each step. Hopefully it... Fri, 13 Apr 2018 00:00:00 -0400 https://chrismaddalena.github.io/2018-04-13-making-a-proton-pack/ https://chrismaddalena.github.io/2018-04-13-making-a-proton-pack/ A look at how a stager works in Assembly - I recently challenged myself to manually write a Windows shellcode stager that could be used to create space for second stage shellcode in an exploit. This is usually the realm of Metasploit and not something you want to write yourself, but the best way to learn something is to get... Mon, 03 Apr 2017 00:00:00 -0400 https://chrismaddalena.github.io/2017-04-03-Exploring-Win32-Shellcode-Stagers/ https://chrismaddalena.github.io/2017-04-03-Exploring-Win32-Shellcode-Stagers/ This is my thesis I wrote for my B.S. in Information Security & Intelligence from Ferris State University. I worked with some great people in the video game industry and the media to put this together. It turned out very well, but it’s a monster at 80 pages. If you want to... Sun, 27 Apr 2014 00:00:00 -0400 https://chrismaddalena.github.io/2014-04-27-thesis/ https://chrismaddalena.github.io/2014-04-27-thesis/