https://plaintext.do/en Offensive cybersecurity firm in the Dominican Republic: infrastructure and application penetration testing, Red Team and social engineering. en Mon, 29 Sep 2025 00:00:00 GMT https://plaintext.do/en/blog/bypassing-duo-security-2fa https://plaintext.do/en/blog/bypassing-duo-security-2fa Mon, 29 Sep 2025 00:00:00 GMT Julio Ureña During an internal penetration test conducted by the Plaintext Cybersecurity Solutions team, we came across an interesting scenario involving Duo Security. Security MFA Windows https://plaintext.do/en/news/nuevas-oficinas https://plaintext.do/en/news/nuevas-oficinas Sat, 06 Sep 2025 00:00:00 GMT PlainText Cybersecurity Solutions officially opens its doors to serve organizations worldwide, anticipating threats through innovation, hacking, research and education. https://plaintext.do/en/news/bienvenido-a-noticias https://plaintext.do/en/news/bienvenido-a-noticias Fri, 05 Sep 2025 00:00:00 GMT We're launching the News section to share announcements, events and updates from the Plaintext Cybersecurity team. https://plaintext.do/en/blog/esc16-escalacion-privilegios-windows https://plaintext.do/en/blog/esc16-escalacion-privilegios-windows Thu, 14 Aug 2025 00:00:00 GMT Jose Milane A few days ago, during an internal pentest alongside my coworkers, we came across a rather interesting configuration in the Active Directory environment. At… Active Directory AD CS Privilege Escalation https://plaintext.do/en/blog/100-days-of-blueteam https://plaintext.do/en/blog/100-days-of-blueteam Fri, 14 Jun 2024 00:00:00 GMT Julio Ureña 2020 came with plenty of surprises for everyone—COVID, social distancing, remote work—and PlainText decided to take a break from its RedTeam learning journey… Blue Team Learning Career https://plaintext.do/en/blog/mi-aprendizaje-exploit-cve-2019-19470 https://plaintext.do/en/blog/mi-aprendizaje-exploit-cve-2019-19470 Fri, 14 Jun 2024 00:00:00 GMT Julio Ureña Hey! I'll try to tell you my story about how I reproduced CVE-2019-19470. This will be both a personal learning experience and technical examples, but it's… Exploit Dev CVE Windows https://plaintext.do/en/blog/buenas-practicas-firewalls https://plaintext.do/en/blog/buenas-practicas-firewalls Fri, 07 Jun 2024 00:00:00 GMT Julio Ureña When performing a Pentest, it's much easier to take advantage of the lack of awareness among network/security administrators who don't realize how we can use… Firewalls Hardening Best Practices https://plaintext.do/en/blog/mi-primer-cve-credenciales-ldap-fortigate https://plaintext.do/en/blog/mi-primer-cve-credenciales-ldap-fortigate Fri, 07 Jun 2024 00:00:00 GMT Julio Ureña In July 2018, I reported a vulnerability to the Fortinet development team that I discovered in how FortiGate (version 6.0.2 and earlier) handled LDAP… CVE FortiGate LDAP https://plaintext.do/en/blog/oscp-introduccion-pentesting https://plaintext.do/en/blog/oscp-introduccion-pentesting Fri, 07 Jun 2024 00:00:00 GMT Julio Ureña In March 2017, I started an Ethical Hacking course at CertyAcademy. I saw this course as a way to understand how hackers operate so I could build more… OSCP Certifications Career https://plaintext.do/en/blog/pentesting-active-directory-lab-parte-1 https://plaintext.do/en/blog/pentesting-active-directory-lab-parte-1 Fri, 07 Jun 2024 00:00:00 GMT Julio Ureña --- Active Directory Pentesting Lab https://plaintext.do/en/blog/pentesting-active-directory-lab-parte-2 https://plaintext.do/en/blog/pentesting-active-directory-lab-parte-2 Fri, 07 Jun 2024 00:00:00 GMT Julio Ureña In Part 1 we managed to gain access to the internal network through Password Spraying. Now in this second part we'll get into some interesting techniques… Active Directory Pentesting Lab https://plaintext.do/en/blog/whatsapp-protector https://plaintext.do/en/blog/whatsapp-protector Fri, 07 Jun 2024 00:00:00 GMT Julio Ureña Automation is the reason I love programming. I must confess I'm not the best developer, but I can't deny that I really enjoy it. WhatsApp Tools Phishing https://plaintext.do/en/blog/dropbox-pythonnn-dll-ejecutar-scripts-python https://plaintext.do/en/blog/dropbox-pythonnn-dll-ejecutar-scripts-python Sun, 01 Nov 2020 00:00:00 GMT Julio Ureña I was playing Warzone and started noticing some packet loss, which is "not good at all" if you're playing an FPS game. I went into Task Manager and looked… Red Team Windows Python https://plaintext.do/en/blog/whatsapp-two-step-verification-reminder-bypass https://plaintext.do/en/blog/whatsapp-two-step-verification-reminder-bypass Sun, 01 Nov 2020 00:00:00 GMT Julio Ureña In February 2019, I reached out to the Facebook team regarding a bug I found in WhatsApp's two-step verification reminder feature—a feature designed to help… WhatsApp MFA Security https://plaintext.do/en/blog/campana-concientizacion-phishing https://plaintext.do/en/blog/campana-concientizacion-phishing Tue, 21 Jul 2020 00:00:00 GMT Julio Ureña I've recently witnessed a wave of Phishing attacks—something that hasn't changed over the years. It simply evolves, shifts, repeats itself, but it always… Phishing Awareness Security https://plaintext.do/en/blog/hackthebox https://plaintext.do/en/blog/hackthebox Sun, 19 Jul 2020 00:00:00 GMT Julio Ureña --- HackTheBox CTF Learning https://plaintext.do/en/blog/pentesting-active-directory-lab-parte-3 https://plaintext.do/en/blog/pentesting-active-directory-lab-parte-3 Sun, 19 Jul 2020 00:00:00 GMT Julio Ureña In Part 2 we had the opportunity to use several mechanisms to evade security controls in Active Directory, and with tools like Metasploit and CrackMapExec we… Active Directory Pentesting Lab https://plaintext.do/en/blog/vulnhub https://plaintext.do/en/blog/vulnhub Sun, 19 Jul 2020 00:00:00 GMT Julio Ureña Vulnhub is another CTF (Capture The Flag) platform where you can practice hacking. The advantage this platform offers is that you can download the virtual… Vulnhub CTF Learning