Posts by Year

Malware Development Introduction aka Malware Dev 101 - Part 2

16 minute read

Malware Development Introduction (aka Malware Dev 101), Part 2 - Evasion Basics

Malware Development Introduction aka Malware Dev 101 - Part 1

12 minute read

Malware Development Introduction (aka Malware Dev 101), Part 1

Sliver C2 Deployment for Red Team Engagements

9 minute read

Sliver has been a popular open-source C2 in recent years and has had continuous improvements since its release. It’s cross-platform and easy to setup which w...

The right way to proxy .NET tools through SOCKS proxies

1 minute read

Scenario: You’re on a red team engagement and want to execute .NET utilites in your Beacon but need to increase your chances at evasion and opsec. You obviou...

Malware Development: CSharp Alterntive Shellcode Callbacks

1 minute read

For a while now, people have been using alternative callback methods in C/CSharp payloads instead of the vanilla CreateThread() or similar Windows API funct...

Malware Development: DLL Sideloading via ‘DLL Proxying’

7 minute read

I’m going to cover an example of how to perform a DLL sideload from start to finish using a C++ payload and a legitimate DLL commonly found on disk. The spec...

Cobalt Strike - BOF Collection

less than 1 minute read

Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.

Cobalt Strike - Red Team CheatSheet

less than 1 minute read

I created a handy cheat sheet for Cobalt Strike commands for red teaming engagements which utilize both CSharp and PowerShell tools.

Pentester Academy - Certified Red Team Professional Cert & Exam Review

4 minute read

Sans GXPN - Course Review

8 minute read

In October of 2018 I had the lucky opportunity to take the Sans SEC660 “Advanced Penetration Testing, Exploit Writing, and Ethical Hacking” in-person course....

Ret2libc Buffer Overflow Demo Video

less than 1 minute read

A little demo walk through I made of a Linux Ret2Libc style buffer overflow to bypass DEP stack protections which is featured in the Sans GXPN course and cer...

Hitachi Security Blog Posts

less than 1 minute read

In 2018 I started doing some freelance writing for Hitachi security systems. The posts focused on introductory penetration testing and vulnerability assessm...

OSCP Review

7 minute read

Review of my OSCP experience Course link

SLAE Assignment 3

3 minute read

SecurityTube Linux Assembly Expert (SLAE) Course Exercises

SLAE Assignment 2

3 minute read

SecurityTube Linux Assembly Expert (SLAE) Assignment 2

SLAE Assignment 1

4 minute read

SecurityTube Linux Assembly Expert (SLAE) Course Exercises