Red Team

VSCode as C2 framework Byte

Data exfiltration using Excel Byte

Nighthawk: An Up-and-Coming Pentest Tool Likely to Gain Threat Actor Notice Byte

Orange Cyberdefense's mindmap for pentesting Active Directory Byte

CVE-2022-42948 - Cobalt Strike 4.7.2 fixes RCE left by the 4.7.1 patch Vulnerability

Phishing With Chromium's Application Mode Byte

CVE-2022-39197 - Cobalt Strike 4.7.1 fixes XSS via Beacon username Vulnerability

The 1992 hacker caper Sneakers turns 30 Byte

Credential Gathering From Third-Party Software Byte

Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus Byte

ETHERLED: Sending Covert Morse Signals from Air-Gapped Devices via Network Card (NIC) LEDs Byte

Manjusaka imitates Cobalt Strike with Rust implants and a Go C2 Byte

Running a successful phishing campaign Byte

MDSec on detecting in-memory beacons and Cobalt Strike Byte

Microsoft quietly fixes ShadowCoerce Byte

pre.empt's Maelstrom series builds a minimal C2 and its detections Byte

Modern Initial Access and Evasion Tactics Byte

Phishing for persistence instead of an immediate callback Byte

Vulnhub - Breach 3 boot2root CTF walkthrough 10 min read

The third boot2root system in the Breach series is an intermediate challenge. This time the VM will automatically acquire an IP address via DHCP. First, let’s identify the target system. With …

Vulnhub - Breach 2.1 boot2root CTF walkthrough 8 min read

Breach 2.1 is meant to be beginner to intermediate boot2root/CTF challenge. The VM is configured with a static IP address (192.168.110.151) so you will need to configure your host-only adaptor to this …

Social Engineering with PowerShell Empire and gophish 3 min read

Word macros are one of the top sources of malware infection. Creating such a malicious macro can be done in less than 10 minutes. This article will give an insight how to perform such an attack with …

GIAC Exploit Researcher and Advanced Penetration Tester 6 min read

May 2016 I had the chance to participate in the SANS SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking in Amsterdam. The course syllabus gave a good outline about what to …

Offensive Security Certified Expert 3 min read

Update (October 2020): The OSCE certification and Cracking the Perimeter (CTP) course have been retired. They have been replaced by OSCE3, which requires passing three certifications: OSED (Windows …

Offensive Security Certified Professional 3 min read

I received my OSCP certification via mail. The perfect time to write a short review. Try Harder!