Okta Identity Engine CORS Errors: Understanding “Failed to fetch”During an authorized authentication-flow assessment, a sign-in page loaded, but submitting the form produced Failed to fetch. DevTools also reported a CORS error associated with a request to Okta’s /i22MAOct 21 · 5 min readblog.redghostops.com
I got tired of blurring passwords in Preview, so I built a screenshot tool for pentestersEvery engagement ends the same way for me. I have somewhere between fifty and two hundred screenshots scattered across the Desktop, Downloads and a folder called evidence that I swear I'll organize ne1Sep 13 · 5 min readblog.redghostops.com
GhostLoot part 2: the Microsoft cookie mess, the inbox, and the Google wallPart 1 got the loot out of Evilginx's session list. Part 2 is what I learned the hard way after that: which Microsoft cookie is actually money, which "TTL" is a fiction, how the panel had to stop beinSep 8 · 8 min readblog.redghostops.com
I got tired of Evilginx's session list, so I built GhostLootRun an AiTM campaign with Evilginx for a day and you know the drill. You SSH into the box, type sessions, and a wall of rows scrolls by. Bots. Scanners. The same target who clicked five times. Landing22SMSep 6 · 7 min readblog.redghostops.com
SAM-EXFIL: Credential Extraction via Raw NTFS Volume ReadsAs red teamers regularly operating against mature Windows environments, we frequently encounter endpoint detection and response solutions that monitor access to Windows credential hive files at the AP31MMay 8 · 10 min readblog.redghostops.com
