top of page

Cybersecurity Insights


Physical Pentesting with USB/OMG plug
I thought it would be interesting to deploy the hoax shell PowerShell payload via the omg cable. In the following video this is exactly...

Chris Coulombe
Nov 7, 20221 min read


o365 Business Premium account MFA bypass
I setup a Debian 10 server on Linode to host Evilginx where I was able to successfully initiate a man-in-the-middle attack to steal the...

Chris Coulombe
Nov 3, 20221 min read


Token Impersonation From Nessus Credentialed Scan
In the above video I demonstrate how I'm able to get domain admin from token impersonation of a credentialed Nessus scan. I start by...

Chris Coulombe
Nov 3, 20221 min read
bottom of page