applied security research
AUTHOR
Rik van Duijn
Follow me
#CES2021
Azure App Consent Policies
Rik van Duijn - 11 nov 2020
OAuth consent phishing has been on the rise for a while now. Unsurprisingly, Microsoft has gradually introduced measures to protect from this type of attack. Latest: Risk-Based Step-Up Consent. Lees verderHoneytokens using Azure Keyvaults
Rik van Duijn - 15 okt 2020
In 2017 Wesley and I gave a presentation at SHA2017 about honey/pot/tokens. We actually planned on building a fully fledged platform. But never came further then the POC phase of that project. This week we got a product demo from the guys at Thinkst, i’ve always loved this way of thinking: let the attacker come […] Lees verderDetecting BEC fraud using Azure Sentinel
Rik van Duijn - 17 jun 2020
Business Email Compromise (BEC) Fraud inflicts the most damage of all types of cybercrime, according to the FBI. How to detect such attacks using Azure Sentinel? Rik shares some actual possibilities. Lees verderPhishing aftercare
Rik van Duijn - 26 mei 2020
This blog is part of our Office 365 attack & defense series. We also maintain a Github page where we share our Office 365 tools and queries. We often get sent phishing emails by family and friends. Not to phish us but because we ask family and friends to forward them to us. Sometimes they […] Lees verderOffice 365 – Exchange rules
Rik van Duijn - 13 mei 2020
This blog is part of our Office 365 attack & defense series. We also maintain a Github page where we share our Office 365 tools and queries. Exchange rules can be useful in managing the emails we receive on a daily basis. For example, it allows users to automatically respond or move specific emails to […] Lees verderApplied Security Research; more than just a pay-off
Rik van Duijn - 28 apr 2020
Rik beschrijft wat Applied Security Research voor hem betekent. En hoe we als Zolder die pay-off in praktijk willen brengen. Lees verderWindows terminal profile fun
Rik van Duijn - 24 apr 2020
Rik plays around with the preview version of Windows Terminal to find manipulation options. Lees verder#1 – Hello World!
Rik van Duijn - 14 apr 2020
Zolder is live! Vanaf nu zullen wij ongeveer eens per maand een nieuwe zoldersession plaatsen. Per keer kiezen we een bepaald thema en gaan we in op cybersecurity actualiteiten. Deze eerste sessie is een kennismaking: wie zijn de mensen achter Zolder? Hoe ervaren zij de wereld om zich heen? Waarom zijn ze een bedrijf gestart en hoe beelden zij de toekomst in? Lekker onwennig nog want de eerste keer, maar dus ook eerlijk en puur! Lees verderBlogs
Zolder.App LIVE Presentations
During #CES2021 we will host a daily LIVE event in Microsoft Teams – OPEN FOR ALL, so also available for non-CES-visitors and non-Teams-users. Monday – Tuesday – Wednesday from 17:00 – 17:30 CET / 11:00 – 11:30 AM EST. The events will be hosted by Erik Remmelzwaal in English. The sessions will be opened for […] Lees verder#CES2021 - We Are Ready!
We are very excited to be part of the #CES2021NL mission! Meet us at CES (Januari 11-14) in our online booth 10609 and see how we solve global challenges with NLTech. Erik Remmelzwaal, Co-Founder & CEO Yes I indeed think we are ready for CES. At this virtual event we will showcase Zolder.App. I am […] Lees verderAzure App Consent Policies
OAuth consent phishing has been on the rise for a while now. Unsurprisingly, Microsoft has gradually introduced measures to protect from this type of attack. Latest: Risk-Based Step-Up Consent. Lees verderHoneytokens using Azure Keyvaults
In 2017 Wesley and I gave a presentation at SHA2017 about honey/pot/tokens. We actually planned on building a fully fledged platform. But never came further then the POC phase of that project. This week we got a product demo from the guys at Thinkst, i’ve always loved this way of thinking: let the attacker come […] Lees verderRisk of exposed home automation services
At home, I am automating many things for fun. Currently I am using Home Assistant, an incredibly powerful piece of software for automating your home. Regularly I am combining the home automation experiences with security. Home automation is often related to physical things such as changing lights, moving curtains, opening door locks or turning the […] Lees verderHacking the traffic light of the future
Nowadays we are connecting everything we can think of to the internet. Usually to make our lives easier or more comfortable. Some of the new upcoming innovations are related to making our traffic smart with the goal to improve safety, comfort and the traffic flow. We dived into this technology to analyze the inner workings and identify potential security risks. Lees verderDetect lateral movement with Azure Sentinel
Lately we have been setting up a the production network for our Zolder.App service. The network consists of multiple segments separated by a firewall. As an addition we wanted to add monitoring features into the network. If an attacker is in our network, we would like to get a notification. Lees verderDetecting BEC fraud using Azure Sentinel
Business Email Compromise (BEC) Fraud inflicts the most damage of all types of cybercrime, according to the FBI. How to detect such attacks using Azure Sentinel? Rik shares some actual possibilities. Lees verderPhishing aftercare
This blog is part of our Office 365 attack & defense series. We also maintain a Github page where we share our Office 365 tools and queries. We often get sent phishing emails by family and friends. Not to phish us but because we ask family and friends to forward them to us. Sometimes they […] Lees verderInside a phishing panel
Dutch and Belgium citizens are receiving phishing attacks every day. But how does that exactly work? Lees verderOffice 365 - Exchange rules
This blog is part of our Office 365 attack & defense series. We also maintain a Github page where we share our Office 365 tools and queries. Exchange rules can be useful in managing the emails we receive on a daily basis. For example, it allows users to automatically respond or move specific emails to […] Lees verderOffice 365 - malicious applications
Wesley dives into the App Registrations feature of Microsoft Azure Active Directory. Finds ways to abuse it through delegate & application permissions and shares ideas howto protect from such abuse. Lees verderWindows terminal profile fun
Rik plays around with the preview version of Windows Terminal to find manipulation options. Lees verderBuilding a Zolder logo
Wesley writes about his most recent IoT project: building a Zolder logo with WS2812B ledstrips behind it, to give it some cool effects. Lees verderZoldersessions
Zolder.App LIVE Presentations
#CES2021 - We Are Ready!
Azure App Consent Policies
Honeytokens using Azure Keyvaults
Risk of exposed home automation services
Hacking the traffic light of the future
Detect lateral movement with Azure Sentinel
Detecting BEC fraud using Azure Sentinel
Phishing aftercare
Inside a phishing panel
Office 365 - Exchange rules
Office 365 - malicious applications