Contribute to oskarsve/ms-teams-rce development by creating an account on GitHub.

By Mordechai Guri
paper: http://www.covertchannels.com
https://arxiv.org/abs/2012.06884

Windows for Red Teamers. Contribute to morph3/Windows-Red-Team-Cheat-Sheet development by creating an account on GitHub.

Convenient commands for your pentesting / red-teaming engagements, OSCP and CTFs.

Contribute to rdoix/CVE-2020-10148-Solarwinds-Orion development by creating an account on GitHub.

Decompetition CTF - Baby Go

One of the greatest features of IDA is the ability to use Python directly in the interface to manipulate the disassembly code. IDAPython…

Are tech support scammers smart enough to notice a 20+ year old version of windows? Would they hang up right away or keep trying to scam me even though their noscript won't work?
► My Anti Scam Software: https://seraphsecure.com/?ref=yt

► Submit Scams: …

A implementation critique on SUNSPOT, the MSBuild implant of SUNBURST.

A now-fixed Sudo vulnerability allowed any local user to gain root privileges on Unix-like operating systems without requiring authentication.

Introduction

This post covers how Cobalt Strike staging works, how to replicate a staging request to obtain beacon shellcode, and then how to extract the Cobalt Strike config from the shellcode.

PyBeacon is a collection of noscripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, parse symmetric encrypted taskings