Incursus Absconditus

During red team post exploitation I sometimes run into jump boxes leading to test environments, production servers, DMZs, or other organizat...

There has been a great deal of sharing of client side techniques of late, so I thought I'd toss out a tip. A means to have a PE executab...

We all can get a little lazy relying on the frameworks that have arisen due to the monetization of offensive skills. In light of this, I wan...

- Exploiting Local Interprocess Command Sockets - How this came to be: A few weekends ago I was working through exercises from the fo...

- Leaving a Key Under the Mat - Why Do This: On a recent engagement, I ran into a well-meaning individual who, after being briefed a...