4 min read
Evasion As preparation exercise, building towards evasion using LOL Drivers, we look at IOCTLs on Windows and eject a USB disk.
script execution
10 min read
Pentesting There are days in Hacking when things don't work as expected - such happened to our latest topic. Instead, we'll have a look at a more historic topic: Format String Exploits
12 min read
Physical Access A suprise special for everyone, who knows what this date means to us.
9 min read
Evasion At times, it will be handy to have all complementary evasion commands at hand. We tried to compile the ultimate list, without going overboard.
2 min read
Evasion We made the bold claim, that all AMSI evasions still work. But is that really true? Come in for a ride.
2 min read
Evasion Once made some architecture visualisations - maybe a chance to explain how these came to life and how I discovered: all evasions still work fine.
4 min read
Offensive Security Explore tactical approaches to bypass PowerShell execution policies, a critical competency for offensive security professionals. This article unveils 15 distinct tactics for executing PowerShell scripts unrestricted, equipping practitioners with the knowledge to navigate and manipulate execution policies effectively.
3 min read
RedTeam Discover a simple persistence technique to leverage environment path interception vulnerabilities, using SCRNSAVE.exe to trigger a Sliver mTLS payload. This detailed guide covers the process from identifying the vector to executing the Sliver payload, aimed at offensive security professionals seeking to enhance their toolkit.