Tim MalcomVetter, Walmart We have this saying on my red team that we borrowed from the NSA Red Team: “if we win, we lose.” It reveals the dichotomy of excellin…

I've been a red teamer for twenty years now, perhaps even longer, but I didn't know what to call it until 1995 when I started working with the Department of Defense. I've also been fortunate

A hidden feature of Metasploit, is the ability to add SMB Named Pipe listeners in a meterpreter session to pivot on an internal network…

During my study time for mobile application testing, I came to the realization that there are a lot of bad coding practices taking place…

Lateral Movement Technique Denoscription

Introduction

Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed that you already owned the target machine.

A C# penetration testing tool to discover low-haning web fruit via web requests. - rvrsh3ll/SharpFruit

In this post I wanted to look at a technique which is by no means new to .NET developers, but may prove useful to redteamers crafting their tools... exporting .NET static methods within a DLL... AKA using RunDLL32 to launch your .NET assembly.

As offensive toolsets continue to move towards using C# as the language of choice for post-exploitation, I thought it’d be useful to think…

Introduction

Introduction

Hello Everyone,

An Example in Getting Around CrowdStrike Endpoint Protection

Virtualization technology is fast becoming the backbone of the security strategy for modern computing platforms. Hyper-V, Microsoft's virtualization stack, is no exception and is therefore held to a high security standard, as is demonstrated by its $250,000…

While security products are a great supplement to the defensive posture of an enterprise, to well-funded nation-state actors, they are an impediment to achieving their objectives. As pentesters argue the efficacy of a product because it doesn't detect their…

Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation. CVE-2018-8550 . local exploit for Windows platform