pentesting

We create a physical Info-Stealer that is undetectable and leaves no traces.

Leasing a SIM on a garage sale: confidentiality, integrity, availability

AhMyth is a Android RAT capable of compiling malicous .apks that can control almost anything on a victim phone.

Today, pretty much all tools and methods are fair game when it comes to both Offensive and Defensive Security, especially when we're talking about Social Engineering.

In this article we explain, how and why some UAC Bypasses no longer work, and what you can do about it.

We're looking at common tools and techniques that fully work in 2024, like the Aircrack-ng suite and additional tools for effective Wi-Fi security testing.

When you start into Ethical Hacking, you may come from a lot of career pathes. For us this meant, we never before had contact or experience with the digital, criminal underworld. We had a lot to learn.

While doing OSINT recently, we stumbled across a way to enumerate Facebook Users - without being logged-in.

This is the latest, 2024 Germany & EU version of Open Source Intelligence. All tried and tested.

While the usual tipps on Operational Security are rather generic, we took a deep dive and looked into TrueCrime cases.

Well, well, well. What do we have here?

It's Friday, so let's go low key and look at one of many modern Enumeration and Hacking automation tools. Actually, there are 3 different versions of httpx.

Exploiting suo and csproj files recently gained attention, used in attacks on Cybersecurity researchers. We found another way

We dive into deeper water today, looking at GSM3 and briefly into SS7.

A Comprehensive Guide for Modern Pentesters

C2 Powershell Empire is a classic - but can you still use it with EDR (Defender) in place?

Let's try and do things like they're done in real attacks. While the media recently was all over ConnectWise ScreenConnect, we instead focus on AnyDesk - which is used by many Cybercriminals these days - in an Assumed Breach scenario.

We created a custom reverse shell from scratch and made it persistent - the result is scary, to say the least.

As promissed, we continue executing code using rundll32 on a fully updated system.

Today we're looking at one of the most simple evasions - it's always fascinating to wittness the beauty of traditional hacking exploration methods working to their full extend. The rundll32.exe comma bypass is one of these examples.

Take a look at our Pentesting and CTF Flowcharts - they should help you especially in the beginning.