5 min read
RedTeam We create a physical Info-Stealer that is undetectable and leaves no traces.
redteam
6 min read
True Cybercrime Leasing a SIM on a garage sale: confidentiality, integrity, availability
2 min read
Persistence This blog post will cover how to execute a payload on opening a powerpoint presentation.
4 min read
True Cybercrime Today, pretty much all tools and methods are fair game when it comes to both Offensive and Defensive Security, especially when we're talking about Social Engineering.
7 min read
Evasion After a conversation about evasion techniques, we asked about new ones.
4 min read
RedTeam We're looking at common tools and techniques that fully work in 2024, like the Aircrack-ng suite and additional tools for effective Wi-Fi security testing.
7 min read
RedTeam We're jammin, jammin - And we hope you like jamming, too.
6 min read
Cybersecurity We take a peek at two more recent publications in the field of Information Security, which are the legal pillars for Redteaming.
2 min read
Evasion In our evasion series we take a look at the latest in evasion evolution: Freeze
3 min read
Cybersecurity Insights Today we'll show you probably the best Repo for Cybersecurity Professionals - this is truly a gift.
4 min read
Privilege Escalation KrbRelayUp is a no-fix method for privilege escalation - that's why it's still very interesting and usable.
3 min read
Pentesting Got your new Schmalaxy SXT9000 Smartphone with the great features and security, but it's already boring? Let's bring tools like Metasploit or SQLMap into your Pocket
2 min read
Evasion We already explored many simple pathes to be able to run exe files while bypassing EDR like Defender. Now we go a step further.
5 min read
Cybersecurity Research About one year ago we proposed the use of alternative coding styles to evade code scanners. Guess we gotta prove that it works.
5 min read
Cybersecurity Research Using a few tricks we can make a PE payload, that looks like a PDF - including file name.
2 min read
Cybersecurity Research Exploiting suo and csproj files recently gained attention, used in attacks on Cybersecurity researchers. We found another way
8 min read
Social Engineering Cognitive ease and cognitive strain are two essential concepts in social engineering and psychology, playing a role in everyday human interaction, in combo with Decision Fatique it's the ultimate tool
12 min read
Physical Access A suprise special for everyone, who knows what this date means to us.
7 min read
Social Engineering Negative Manipulation 02 - looking at ways to weaponize provocation and how to create hate.
5 min read
Operational Security In this article we show to Average Joe, how you can communicate with unbreakable encryption and almost absolutely private.
9 min read
Evasion At times, it will be handy to have all complementary evasion commands at hand. We tried to compile the ultimate list, without going overboard.
6 min read
Social Engineering Let's have a look at how you can combine two techniques seemlessly for an evil plan, using a classic priming setup
4 min read
Social Engineering Power vs Control. In this Social Engineering special, we compare negative manipulation tactics that occur in relationships, the workplace, religious- and other social communities.
8 min read
Social Engineering The essence of social engineering lies in subtly guiding your target through a conversation without them ever realizing your true intentions. A combination of emotion-first strategy, hooking, and exchanged context forms a powerful toolkit for the adept social engineer.
7 min read
Social Engineering Let's get deeper into the art and science of Social Engineering, uncovering the psychological underpinnings and tactical applications of emotion-first strategies, hooking, and context exchange. This installment reveals the nuanced techniques that shape influence and decision-making, tailored for enthusiasts and professionals in red teaming and social engineering.
2 min read
Evasion We made the bold claim, that all AMSI evasions still work. But is that really true? Come in for a ride.
4 min read
Cybersecurity Research We created a custom reverse shell from scratch and made it persistent - the result is scary, to say the least.
2 min read
Evasion Once made some architecture visualisations - maybe a chance to explain how these came to life and how I discovered: all evasions still work fine.
7 min read
Cybersecurity Research As promissed, we continue executing code using rundll32 on a fully updated system.
2 min read
Cybersecurity Research Today we're looking at one of the most simple evasions - it's always fascinating to wittness the beauty of traditional hacking exploration methods working to their full extend. The rundll32.exe comma bypass is one of these examples.
2 min read
Social Engineering Diving deep into the art and science of Social Engineering, exploring its roots in psychology, manipulation tactics, and modern applications. From shocking surprises to exchanging context, uncover the techniques that shape this fascinating field.
2 min read
Cybersecurity Insights Looking into every-day Mail Spoofing, often overlooked world of Email Spoofing, where SPF bypass techniques blur the lines between legitimate communication and cyber threats.