6 min read
True Cybercrime Leasing a SIM on a garage sale: confidentiality, integrity, availability
cybersecurity
3 min read
C2 AhMyth is a Android RAT capable of compiling malicous .apks that can control almost anything on a victim phone.
2 min read
Persistence This blog post will cover how to execute a payload on opening a powerpoint presentation.
4 min read
True Cybercrime Today, pretty much all tools and methods are fair game when it comes to both Offensive and Defensive Security, especially when we're talking about Social Engineering.
7 min read
Cybersecurity Exploring the rise of ransomware threats in 2023/2024, changes in attack methods, and the challenge of underreporting due to privacy laws.
7 min read
Evasion After a conversation about evasion techniques, we asked about new ones.
4 min read
RedTeam We're looking at common tools and techniques that fully work in 2024, like the Aircrack-ng suite and additional tools for effective Wi-Fi security testing.
4 min read
True Cybercrime When you start into Ethical Hacking, you may come from a lot of career pathes. For us this meant, we never before had contact or experience with the digital, criminal underworld. We had a lot to learn.
10 min read
Cybersecurity Adapting traditional Intelligence strategy to the modern Cybersecurity landscape.
4 min read
Evasion As preparation exercise, building towards evasion using LOL Drivers, we look at IOCTLs on Windows and eject a USB disk.
7 min read
RedTeam We're jammin, jammin - And we hope you like jamming, too.
7 min read
True Cybercrime After we found an extensive guide, how to defraud Online Banking customers, we started analysing the topic.
6 min read
Cybersecurity We take a peek at two more recent publications in the field of Information Security, which are the legal pillars for Redteaming.
3 min read
Cybersecurity While doing OSINT recently, we stumbled across a way to enumerate Facebook Users - without being logged-in.
36 min read
Cybersecurity This is the latest, 2024 Germany & EU version of Open Source Intelligence. All tried and tested.
29 min read
True Cybercrime While the usual tipps on Operational Security are rather generic, we took a deep dive and looked into TrueCrime cases.
2 min read
Cybersecurity Well, well, well. What do we have here?
6 min read
Enumeration It's Friday, so let's go low key and look at one of many modern Enumeration and Hacking automation tools. Actually, there are 3 different versions of httpx.
2 min read
Evasion In our evasion series we take a look at the latest in evasion evolution: Freeze
3 min read
Cybersecurity Insights Today we'll show you probably the best Repo for Cybersecurity Professionals - this is truly a gift.
4 min read
Privilege Escalation KrbRelayUp is a no-fix method for privilege escalation - that's why it's still very interesting and usable.
10 min read
Pentesting There are days in Hacking when things don't work as expected - such happened to our latest topic. Instead, we'll have a look at a more historic topic: Format String Exploits
3 min read
Pentesting Got your new Schmalaxy SXT9000 Smartphone with the great features and security, but it's already boring? Let's bring tools like Metasploit or SQLMap into your Pocket
2 min read
Evasion We already explored many simple pathes to be able to run exe files while bypassing EDR like Defender. Now we go a step further.
5 min read
Cybersecurity Research About one year ago we proposed the use of alternative coding styles to evade code scanners. Guess we gotta prove that it works.
5 min read
Cybersecurity Research Using a few tricks we can make a PE payload, that looks like a PDF - including file name.
11 min read
RedTeam We dive into deeper water today, looking at GSM3 and briefly into SS7.
12 min read
Physical Access A suprise special for everyone, who knows what this date means to us.
6 min read
Enumeration A Comprehensive Guide for Modern Pentesters
9 min read
Evasion At times, it will be handy to have all complementary evasion commands at hand. We tried to compile the ultimate list, without going overboard.
3 min read
C2 C2 Powershell Empire is a classic - but can you still use it with EDR (Defender) in place?
2 min read
Evasion We made the bold claim, that all AMSI evasions still work. But is that really true? Come in for a ride.
7 min read
C2 Let's try and do things like they're done in real attacks. While the media recently was all over ConnectWise ScreenConnect, we instead focus on AnyDesk - which is used by many Cybercriminals these days - in an Assumed Breach scenario.
2 min read
Evasion Once made some architecture visualisations - maybe a chance to explain how these came to life and how I discovered: all evasions still work fine.
2 min read
Pentesting Take a look at our Pentesting and CTF Flowcharts - they should help you especially in the beginning.
4 min read
Offensive Security Explore tactical approaches to bypass PowerShell execution policies, a critical competency for offensive security professionals. This article unveils 15 distinct tactics for executing PowerShell scripts unrestricted, equipping practitioners with the knowledge to navigate and manipulate execution policies effectively.
2 min read
Cybersecurity Insights Looking into every-day Mail Spoofing, often overlooked world of Email Spoofing, where SPF bypass techniques blur the lines between legitimate communication and cyber threats.