A comprehensive deep-dive into the world of penetration testing and ethical hacking. Learn the core methodologies (PTES), the critical differences between VA and PT, the art of professional reporting, and how to navigate the legal minefield of offensive security.
A deep-dive guide for red teamers transitioning from Linux to macOS. Learn the critical differences in Unix underpinnings, master macOS-specific security boundaries like TCC and SIP, discover “Living off the Land” techniques using JXA and AppleScript, and understand how to persist using LaunchDaemons.
A comprehensive deep-dive into PsExec for offensive operations. Learn how it works under the hood, how to leverage Pass-the-Hash with Impacket, advanced techniques for service name evasion, and understand the massive forensic footprint it leaves so you know when (and when NOT) to use it.
A comprehensive deep-dive into using sc.exe for offensive operations. Learn how to weaponize the Windows Service Control Manager for remote code execution, establish robust persistence via service failure actions, modify permissions with subinacl, and bypass EDR controls using kernel-mode drivers.
A deep-dive into the hidden layer of microcode. Explore its architecture, the non-persistent update process, the cryptographic protections (and weaknesses) of vendor signatures, and the modern microarchitectural attacks like Downfall and Zenbleed that have redefined hardware security.
A comprehensive deep-dive into WMIC for offensive security. Learn how to interrogate system internals, perform lateral movement, discover security software, abuse XSL transformation for code execution, and understand the forensic footprint of WMI activity.
A comprehensive guide on using DSQuery for Active Directory reconnaissance. Learn how to discover privileged accounts, sniff out Kerberoastable SPNs, identify Unconstrained Delegation, and what to do when RSAT isn’t installed.
A comprehensive deep-dive into advanced Windows command-line tools. Learn how to leverage modern binaries like curl and tar, abuse legacy tools like Certutil and WMIC, and perform stealthy data exfiltration and persistence without triggering EDRs.
A specialized guide for red teamers on exfiltrating and migrating data from a target MySQL database to a local PostgreSQL instance. Learn how to use Docker for rapid infrastructure deployment, pgloader for automated schema conversion, and handle both live network migrations and offline dump analysis.
A comprehensive deep-dive into Chisel, the ultimate tool for bypassing network restrictions via SSH-over-HTTP. Learn how to master forward and reverse tunnels, establish stealthy SOCKS proxies, harden your infrastructure with TLS, and modify the source code for evasion.