Tags

Posts grouped by topic. Use a tag to find related write-ups.

active-directory

• Insecure Active Directory Lab For Training (IaC)

ai

• Finding 0-Days With Claude in Under an Hour
• LLM Hacking: Prompt Injection

apt

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

automation

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

aws

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

blue-team

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021
• Resource Efficient Internal Network Honeypots
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

bluetooth

• Hacking From the Sky - Penetration Testing UAV

boofuzz

• Detecting Bugs Using Network Protocol Fuzzing

browsers

• 6-Eyed-Spider Post-Exploitation Red-Team Tool

bug-hunting

• Detecting Bugs Using Network Protocol Fuzzing

c2

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking
• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

c3

• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

carving

• Manually Encode Bytes & Shellcode Carving

channels

• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

chatgpt

• LLM Hacking: Prompt Injection

cisa

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

cisco

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

claude

• Finding 0-Days With Claude in Under an Hour

claude-code

• Finding 0-Days With Claude in Under an Hour

cobalt-strike

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking
• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

code-review

• Finding 0-Days With Claude in Under an Hour

configuration

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

csharp

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

cve

• Finding 0-Days With Claude in Under an Hour
• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

cve-2025-59287

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

cve-2026-8795

• Finding 0-Days With Claude in Under an Hour

dcsync

• Insecure Active Directory Lab For Training (IaC)

deception

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Resource Efficient Internal Network Honeypots

deserialization

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

detection

• Resource Efficient Internal Network Honeypots
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

detection-engineering

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

dfir

• Finding 0-Days With Claude in Under an Hour
• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

dhcp

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

dhcp-snooping

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

dns

• Resource Efficient Internal Network Honeypots

drone

• Hacking From the Sky - Penetration Testing UAV

edr

• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

egg-hunting

• Windows Exploit Development: Egg Hunting

encoding

• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Manually Encode Bytes & Shellcode Carving

ettercap

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

expdev

• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

exploit-development

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization
• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Detecting Bugs Using Network Protocol Fuzzing
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

externalc2

• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

f-secure

• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

firefox

• 6-Eyed-Spider Post-Exploitation Red-Team Tool

fleet

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

forensics

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

fuzzing

• Detecting Bugs Using Network Protocol Fuzzing

hackmegpt

• LLM Hacking: Prompt Injection

hardware

• Hacking From the Sky - Penetration Testing UAV

hhoneypot

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

homelab

• Insecure Active Directory Lab For Training (IaC)
• Resource Efficient Internal Network Honeypots
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

honeypot

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Resource Efficient Internal Network Honeypots

huntress

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

iac

• Insecure Active Directory Lab For Training (IaC)

implant

• 6-Eyed-Spider Post-Exploitation Red-Team Tool

incident-response

• Finding 0-Days With Claude in Under an Hour
• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021
• Resource Efficient Internal Network Honeypots
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

infrastructure

• Insecure Active Directory Lab For Training (IaC)
• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking
• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

irsec

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

javascript

• 6-Eyed-Spider Post-Exploitation Red-Team Tool

kerberoasting

• Insecure Active Directory Lab For Training (IaC)

kev

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

kolide

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

lab

• Insecure Active Directory Lab For Training (IaC)
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

linux

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

llm

• Finding 0-Days With Claude in Under an Hour
• LLM Hacking: Prompt Injection

llm-security

• LLM Hacking: Prompt Injection

lpe

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

malware

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

malware-analysis

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

memory

• Windows Exploit Development: Egg Hunting

mimikatz

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3

mitigation

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

mitre-attack

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

msfvenom

• Manually Encode Bytes & Shellcode Carving

network-protocols

• Detecting Bugs Using Network Protocol Fuzzing

network-security

• Resource Efficient Internal Network Honeypots
• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

nginx

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

obfuscation

• Manually Encode Bytes & Shellcode Carving

osquery

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

owasp

• LLM Hacking: Prompt Injection

packer

• Insecure Active Directory Lab For Training (IaC)

payloads

• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Windows Exploit Development: Utilizing imported functions (WinExec)

pe-imports

• Windows Exploit Development: Utilizing imported functions (WinExec)

pentesting

• Hacking From the Sky - Penetration Testing UAV

pfsense

• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

physical-security

• Hacking From the Sky - Penetration Testing UAV

poc

• Finding 0-Days With Claude in Under an Hour

port-forwarding

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

post-exploitation

• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

process-injection

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

prompt-injection

• LLM Hacking: Prompt Injection

purple-teaming

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

python

• Detecting Bugs Using Network Protocol Fuzzing

ransomware

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

rce

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

red-teaming

• Finding 0-Days With Claude in Under an Hour
• LLM Hacking: Prompt Injection
• Insecure Active Directory Lab For Training (IaC)
• Hacking From the Sky - Penetration Testing UAV
• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1
• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

red-vs-blue

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

rsyslog

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

security-onion

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

seh

• Windows Exploit Development: Egg Hunting

shellcode

• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

siem

• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

sigma

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3

slack

• Resource Efficient Internal Network Honeypots

soapformatter

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

socat

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

spoofing

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

starvation

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

static-analysis

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

sulley

• Detecting Bugs Using Network Protocol Fuzzing

suricata

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3

switching

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

sysmon

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

thick-clients

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

threat-hunting

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021
• Resource Efficient Internal Network Honeypots
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

tooling

• 6-Eyed-Spider Post-Exploitation Red-Team Tool

training

• Insecure Active Directory Lab For Training (IaC)

tunneling

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

uav

• Hacking From the Sky - Penetration Testing UAV

unicode

• Windows Exploit Development: Unicode and Venetian shellcode techniques

unquoted-service-path

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

velociraptor

• Finding 0-Days With Claude in Under an Hour
• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

venetian

• Windows Exploit Development: Unicode and Venetian shellcode techniques

virtualization

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

vulnerability-research

• Finding 0-Days With Claude in Under an Hour
• LLM Hacking: Prompt Injection
• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization
• Detecting Bugs Using Network Protocol Fuzzing

vulnerable-ad

• Insecure Active Directory Lab For Training (IaC)

wazuh

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

web

• LLM Hacking: Prompt Injection

webshell

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3

wifi

• Hacking From the Sky - Penetration Testing UAV

windows

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Insecure Active Directory Lab For Training (IaC)
• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas
• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

windows-server

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

winexec

• Windows Exploit Development: Utilizing imported functions (WinExec)

wireless

• Hacking From the Sky - Penetration Testing UAV

wsus

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

x86

• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

yaml-injection

• Finding 0-Days With Claude in Under an Hour

yara

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3