5 min read
RedTeam We create a physical Info-Stealer that is undetectable and leaves no traces.
offensive security
6 min read
True Cybercrime Leasing a SIM on a garage sale: confidentiality, integrity, availability
3 min read
C2 AhMyth is a Android RAT capable of compiling malicous .apks that can control almost anything on a victim phone.
2 min read
Persistence This blog post will cover how to execute a payload on opening a powerpoint presentation.
4 min read
True Cybercrime Today, pretty much all tools and methods are fair game when it comes to both Offensive and Defensive Security, especially when we're talking about Social Engineering.
2 min read
Evasion In this article we explain, how and why some UAC Bypasses no longer work, and what you can do about it.
7 min read
Evasion After a conversation about evasion techniques, we asked about new ones.
4 min read
RedTeam We're looking at common tools and techniques that fully work in 2024, like the Aircrack-ng suite and additional tools for effective Wi-Fi security testing.
4 min read
True Cybercrime When you start into Ethical Hacking, you may come from a lot of career pathes. For us this meant, we never before had contact or experience with the digital, criminal underworld. We had a lot to learn.
4 min read
Evasion As preparation exercise, building towards evasion using LOL Drivers, we look at IOCTLs on Windows and eject a USB disk.
7 min read
RedTeam We're jammin, jammin - And we hope you like jamming, too.
3 min read
Cybersecurity While doing OSINT recently, we stumbled across a way to enumerate Facebook Users - without being logged-in.
36 min read
Cybersecurity This is the latest, 2024 Germany & EU version of Open Source Intelligence. All tried and tested.
29 min read
True Cybercrime While the usual tipps on Operational Security are rather generic, we took a deep dive and looked into TrueCrime cases.
2 min read
Cybersecurity Well, well, well. What do we have here?
6 min read
Enumeration It's Friday, so let's go low key and look at one of many modern Enumeration and Hacking automation tools. Actually, there are 3 different versions of httpx.
2 min read
Evasion In our evasion series we take a look at the latest in evasion evolution: Freeze
3 min read
Cybersecurity Insights Today we'll show you probably the best Repo for Cybersecurity Professionals - this is truly a gift.
4 min read
Privilege Escalation KrbRelayUp is a no-fix method for privilege escalation - that's why it's still very interesting and usable.
10 min read
Pentesting There are days in Hacking when things don't work as expected - such happened to our latest topic. Instead, we'll have a look at a more historic topic: Format String Exploits
3 min read
Pentesting Got your new Schmalaxy SXT9000 Smartphone with the great features and security, but it's already boring? Let's bring tools like Metasploit or SQLMap into your Pocket
2 min read
Evasion We already explored many simple pathes to be able to run exe files while bypassing EDR like Defender. Now we go a step further.
5 min read
Cybersecurity Research About one year ago we proposed the use of alternative coding styles to evade code scanners. Guess we gotta prove that it works.
5 min read
Cybersecurity Research Using a few tricks we can make a PE payload, that looks like a PDF - including file name.
2 min read
Cybersecurity Research Exploiting suo and csproj files recently gained attention, used in attacks on Cybersecurity researchers. We found another way
11 min read
RedTeam We dive into deeper water today, looking at GSM3 and briefly into SS7.
12 min read
Physical Access A suprise special for everyone, who knows what this date means to us.
6 min read
Enumeration A Comprehensive Guide for Modern Pentesters
9 min read
Evasion At times, it will be handy to have all complementary evasion commands at hand. We tried to compile the ultimate list, without going overboard.
3 min read
C2 C2 Powershell Empire is a classic - but can you still use it with EDR (Defender) in place?
2 min read
Evasion We made the bold claim, that all AMSI evasions still work. But is that really true? Come in for a ride.
7 min read
C2 Let's try and do things like they're done in real attacks. While the media recently was all over ConnectWise ScreenConnect, we instead focus on AnyDesk - which is used by many Cybercriminals these days - in an Assumed Breach scenario.
4 min read
Cybersecurity Research We created a custom reverse shell from scratch and made it persistent - the result is scary, to say the least.
2 min read
Evasion Once made some architecture visualisations - maybe a chance to explain how these came to life and how I discovered: all evasions still work fine.
7 min read
Cybersecurity Research As promissed, we continue executing code using rundll32 on a fully updated system.
2 min read
Cybersecurity Research Today we're looking at one of the most simple evasions - it's always fascinating to wittness the beauty of traditional hacking exploration methods working to their full extend. The rundll32.exe comma bypass is one of these examples.
2 min read
Pentesting Take a look at our Pentesting and CTF Flowcharts - they should help you especially in the beginning.
4 min read
Offensive Security Explore tactical approaches to bypass PowerShell execution policies, a critical competency for offensive security professionals. This article unveils 15 distinct tactics for executing PowerShell scripts unrestricted, equipping practitioners with the knowledge to navigate and manipulate execution policies effectively.