SpecterOps – Telegram
SpecterOps
@SpecterOps
279 subscribers
4 photos
88 links
SpecterOps has unique insight into the cyber adversary mindset and brings the highest caliber, most experienced resources to assess your organizations defenses, shut down attack paths, and increase your security posture and resilience
http://specterops.io
Download Telegram
About
Blog
Apps
Platform
Join
SpecterOps
279 subscribers
SpecterOps
https://posts.specterops.io/introducing-venator-a-macos-tool-for-proactive-detection-34055a017e56
Medium
Introducing Venator: A macOS tool for proactive detection
Background & Introduction
204 views
SpecterOps
https://posts.specterops.io/kerberosity-killed-the-domain-an-offensive-kerberos-overview-eb04b1402c61
SpecterOps
Blog - SpecterOps
Your new best friend: Introducing BloodHound Community Edition!
206 views
SpecterOps
https://posts.specterops.io/through-the-looking-glass-part-1-f539ae308512
Medium
Through the Looking Glass — Part 1
Understanding AWS Traffic Mirroring and Malicious Use
218 views
SpecterOps
https://posts.specterops.io/no-place-like-chrome-122e500e421f
Medium
No Place Like Chrome
Chrome extensions were first introduced to the public in December of 2009 and use HTML, JavaScript, and CSS to extend Chrome’s…
182 views
SpecterOps
https://posts.specterops.io/automating-dll-hijack-discovery-81c4295904b0
Medium
Automating DLL Hijack Discovery
A dive into Windows DLLs, DLL hijacking, automation, WinAPI, and finding the root cause of shared DLL hijacks.
193 views
SpecterOps
https://posts.specterops.io/utilizing-rpc-telemetry-7af9ea08a1d5
Medium
Utilizing RPC Telemetry
A joint blog written by Jared Atkinson, Luke Paine, and Jonathan Johnson
180 views
SpecterOps
https://posts.specterops.io/requesting-azure-ad-request-tokens-on-azure-ad-joined-machines-for-browser-sso-2b0409caad30
Medium
Requesting Azure AD Request Tokens on Azure-AD-joined Machines for Browser SSO
RequestAADRefreshToken is a tool that returns OAuth 2.0 refresh tokens for an Azure-AD-authenticated Windows user (i.e. the machine is…
188 views
SpecterOps
New version of Covenant is out just in time for #BlackHat2020 #Arsenal. New in this release: streaming output for long running tasks, UI themes, and tabbed terminal view.

Post Link: https://posts.specterops.io/covenant-v0-6-134c5054505f
Medium
Covenant v0.6
Intro
185 views
SpecterOps
https://posts.specterops.io/sparkling-payloads-a2bd017095c
Medium
Sparkling Payloads
Leveraging Notarized Payloads and Sparkle for Initial Access
201 views
SpecterOps
https://posts.specterops.io/a-change-of-mythic-proportions-21debeb03617

https://github.com/its-a-feature/Mythic
Medium
A Change of Mythic Proportions
In early 2018, I looked into macOS tradecraft for red teaming and developed a new proof of concept agent in JavaScript for Automation…
194 views
SpecterOps
https://posts.specterops.io/malware-development-pt-1-dynamic-module-loading-in-go-1121f07f3a5a
SpecterOps
Blog - SpecterOps
Your new best friend: Introducing BloodHound Community Edition!
204 views
SpecterOps
https://posts.specterops.io/engineering-process-injection-detections-part-3-analytic-logic-b6014a83d4c8
Medium
Engineering Process Injection Detections — Part 3: Analytic Logic
This is the third post in a series covering some of the thought processes and methodologies used when developing detections for offensive…
212 views
SpecterOps
https://posts.specterops.io/attacking-azure-azure-ad-part-ii-5f336f36697d
Medium
Attacking Azure & Azure AD, Part II
Abstract
224 views
SpecterOps
https://posts.specterops.io/death-from-above-lateral-movement-from-azure-to-on-prem-ad-d18cb3959d4d
Medium
Death from Above: Lateral Movement from Azure to On-Prem AD
I’ve been looking into Azure attack primitives over the past couple of months to gain a better understanding of how the system works, what…
291 views
SpecterOps
https://posts.specterops.io/detections-of-past-present-and-future-26af95517e77
Medium
Detections of Past, Present, and Future
There are countless blog posts specifically focusing on how different techniques work and recommending building detections, however, there…
371 views
SpecterOps
https://posts.specterops.io/are-you-docking-kidding-me-9aa79c24bdc1
SpecterOps
Blog - SpecterOps
Your new best friend: Introducing BloodHound Community Edition!
418 views
SpecterOps
https://posts.specterops.io/abstracting-scheduled-tasks-3b6451f6a1c5
Medium
Abstracting Scheduled Tasks
Written by: Jonathan Johnson and Matt Hand
261 views
SpecterOps
https://posts.specterops.io/man-in-the-terminal-65476e6165b9
Medium
Man in the Terminal
Application Proxy Middleware for Session Stealing
221 views
SpecterOps
https://securityonline.info/ghostwriter/
securityonline.info
Ghostwriter v4.0.1 releases: The SpecterOps project management and reporting engine
Ghostwriter is a part of your team. It helps you manage clients, projects, reports, and infrastructure in one application.
202 views
SpecterOps
Offensive Security Guide to SSH Tunnels and Proxies | by Russel Van Tuyl
https://posts.specterops.io/offensive-security-guide-to-ssh-tunnels-and-proxies-b525cbd4d4c6
SpecterOps
Blog - SpecterOps
Your new best friend: Introducing BloodHound Community Edition!
190 views
SpecterOps
Introducing Mystikal

https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520
SpecterOps
Blog - SpecterOps
Your new best friend: Introducing BloodHound Community Edition!
160 views