Tags

Posts grouped by topic. Jump to a tag to find related write-ups.

• active-directory
• ai
• ansible
• anthropic
• apt
• automation
• aws
• blue-team
• bluetooth
• boofuzz
• browsers
• bug-hunting
• c2
• c3
• carving
• channels
• chat-completions
• chatgpt
• cisa
• cisco
• claude
• claude-code
• cobalt-strike
• code-review
• configuration
• csharp
• curapi
• cursor
• cursor-cli
• cve
• cve-2025-59287
• cve-2026-8795
• dcsync
• deception
• deserialization
• detection
• detection-engineering
• dfir
• dhcp
• dhcp-snooping
• dns
• docker
• drone
• edr
• egg-hunting
• encoding
• ettercap
• expdev
• exploit-development
• externalc2
• f-secure
• firefox
• fleet
• forensics
• frontier-models
• fuzzing
• gemini
• go
• golden-image
• google
• hackmegpt
• hardware
• hhoneypot
• homelab
• honeypot
• huntress
• iac
• implant
• incident-response
• infrastructure
• irsec
• javascript
• kali-linux
• kali-tx
• kerberoasting
• kev
• kolide
• lab
• linux
• llm
• llm-security
• lpe
• malware
• malware-analysis
• mcp
• memory
• mimikatz
• mitigation
• mitre-attack
• msfvenom
• network-protocols
• network-security
• networking
• nginx
• obfuscation
• open-webui
• openai
• openai-api
• openai-compatible
• openrouter
• openwebui
• osquery
• owasp
• packer
• payloads
• pe-imports
• pentesting
• pfsense
• physical-security
• poc
• port-forwarding
• post-exploitation
• process-injection
• prompt-injection
• proxy
• purple-teaming
• python
• ransomware
• rce
• red-teaming
• red-vs-blue
• rsyslog
• security-onion
• seh
• self-hosted
• servers
• shellcode
• siem
• sigma
• slack
• soapformatter
• socat
• spoofing
• starvation
• static-analysis
• sulley
• suricata
• switching
• sysmon
• thick-clients
• threat-hunting
• tooling
• training
• tunneling
• uav
• unicode
• unquoted-service-path
• velociraptor
• venetian
• virtualization
• vulnerability-research
• vulnerable-ad
• wazuh
• web
• webshell
• wifi
• windows
• windows-server
• winexec
• wireless
• wsus
• x86
• yaml-injection
• yara

active-directory

• Insecure Active Directory Lab For Training (IaC)

ai

• Wiring Frontier Models Into OpenWebUI With Curapi
• Finding 0-Days With Claude in Under an Hour
• LLM Hacking: Prompt Injection

ansible

• A Golden Image for Our Pentest VMs

anthropic

• Wiring Frontier Models Into OpenWebUI With Curapi

apt

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

automation

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization
• A Golden Image for Our Pentest VMs

aws

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

blue-team

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021
• Resource Efficient Internal Network Honeypots
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

bluetooth

• Hacking From the Sky - Penetration Testing UAV

boofuzz

• Detecting Bugs Using Network Protocol Fuzzing

browsers

• 6-Eyed-Spider Post-Exploitation Red-Team Tool

bug-hunting

• Detecting Bugs Using Network Protocol Fuzzing

c2

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking
• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

c3

• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

carving

• Manually Encode Bytes & Shellcode Carving

channels

• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

chat-completions

• Wiring Frontier Models Into OpenWebUI With Curapi

chatgpt

• Wiring Frontier Models Into OpenWebUI With Curapi
• LLM Hacking: Prompt Injection

cisa

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

cisco

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

claude

• Wiring Frontier Models Into OpenWebUI With Curapi
• Finding 0-Days With Claude in Under an Hour

claude-code

• Finding 0-Days With Claude in Under an Hour

cobalt-strike

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking
• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

code-review

• Finding 0-Days With Claude in Under an Hour

configuration

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

csharp

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

curapi

• Wiring Frontier Models Into OpenWebUI With Curapi

cursor

• Wiring Frontier Models Into OpenWebUI With Curapi

cursor-cli

• Wiring Frontier Models Into OpenWebUI With Curapi

cve

• Finding 0-Days With Claude in Under an Hour
• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

cve-2025-59287

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

cve-2026-8795

• Finding 0-Days With Claude in Under an Hour

dcsync

• Insecure Active Directory Lab For Training (IaC)

deception

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Resource Efficient Internal Network Honeypots

deserialization

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

detection

• Resource Efficient Internal Network Honeypots
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

detection-engineering

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

dfir

• Finding 0-Days With Claude in Under an Hour
• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

dhcp

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

dhcp-snooping

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

dns

• Resource Efficient Internal Network Honeypots

docker

• Wiring Frontier Models Into OpenWebUI With Curapi

drone

• Hacking From the Sky - Penetration Testing UAV

edr

• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

egg-hunting

• Windows Exploit Development: Egg Hunting

encoding

• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Manually Encode Bytes & Shellcode Carving

ettercap

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

expdev

• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

exploit-development

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization
• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Detecting Bugs Using Network Protocol Fuzzing
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

externalc2

• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

f-secure

• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

firefox

• 6-Eyed-Spider Post-Exploitation Red-Team Tool

fleet

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

forensics

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

frontier-models

• Wiring Frontier Models Into OpenWebUI With Curapi

fuzzing

• Detecting Bugs Using Network Protocol Fuzzing

gemini

• Wiring Frontier Models Into OpenWebUI With Curapi

go

• Wiring Frontier Models Into OpenWebUI With Curapi

golden-image

• A Golden Image for Our Pentest VMs

google

• Wiring Frontier Models Into OpenWebUI With Curapi

hackmegpt

• LLM Hacking: Prompt Injection

hardware

• Hacking From the Sky - Penetration Testing UAV

hhoneypot

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

homelab

• Insecure Active Directory Lab For Training (IaC)
• Resource Efficient Internal Network Honeypots
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1
• 2019 End-of-Year Infrastructure Upgrades

honeypot

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Resource Efficient Internal Network Honeypots

huntress

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

iac

• Insecure Active Directory Lab For Training (IaC)

implant

• 6-Eyed-Spider Post-Exploitation Red-Team Tool

incident-response

• Finding 0-Days With Claude in Under an Hour
• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021
• Resource Efficient Internal Network Honeypots
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

infrastructure

• Insecure Active Directory Lab For Training (IaC)
• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking
• 2019 End-of-Year Infrastructure Upgrades
• A Golden Image for Our Pentest VMs
• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

irsec

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

javascript

• 6-Eyed-Spider Post-Exploitation Red-Team Tool

kali-linux

• A Golden Image for Our Pentest VMs

kali-tx

• A Golden Image for Our Pentest VMs

kerberoasting

• Insecure Active Directory Lab For Training (IaC)

kev

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

kolide

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

lab

• Insecure Active Directory Lab For Training (IaC)
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

linux

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• 2019 End-of-Year Infrastructure Upgrades
• A Golden Image for Our Pentest VMs

llm

• Wiring Frontier Models Into OpenWebUI With Curapi
• Finding 0-Days With Claude in Under an Hour
• LLM Hacking: Prompt Injection

llm-security

• LLM Hacking: Prompt Injection

lpe

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

malware

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

malware-analysis

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

mcp

• Wiring Frontier Models Into OpenWebUI With Curapi

memory

• Windows Exploit Development: Egg Hunting

mimikatz

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3

mitigation

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

mitre-attack

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

msfvenom

• Manually Encode Bytes & Shellcode Carving

network-protocols

• Detecting Bugs Using Network Protocol Fuzzing

network-security

• Resource Efficient Internal Network Honeypots
• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

networking

• 2019 End-of-Year Infrastructure Upgrades

nginx

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

obfuscation

• Manually Encode Bytes & Shellcode Carving

open-webui

• Wiring Frontier Models Into OpenWebUI With Curapi

openai

• Wiring Frontier Models Into OpenWebUI With Curapi

openai-api

• Wiring Frontier Models Into OpenWebUI With Curapi

openai-compatible

• Wiring Frontier Models Into OpenWebUI With Curapi

openrouter

• Wiring Frontier Models Into OpenWebUI With Curapi

openwebui

• Wiring Frontier Models Into OpenWebUI With Curapi

osquery

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

owasp

• LLM Hacking: Prompt Injection

packer

• Insecure Active Directory Lab For Training (IaC)

payloads

• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Windows Exploit Development: Utilizing imported functions (WinExec)

pe-imports

• Windows Exploit Development: Utilizing imported functions (WinExec)

pentesting

• Hacking From the Sky - Penetration Testing UAV
• A Golden Image for Our Pentest VMs

pfsense

• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

physical-security

• Hacking From the Sky - Penetration Testing UAV

poc

• Finding 0-Days With Claude in Under an Hour

port-forwarding

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

post-exploitation

• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior

process-injection

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

prompt-injection

• LLM Hacking: Prompt Injection

proxy

• Wiring Frontier Models Into OpenWebUI With Curapi

purple-teaming

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

python

• Detecting Bugs Using Network Protocol Fuzzing

ransomware

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

rce

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

red-teaming

• Finding 0-Days With Claude in Under an Hour
• LLM Hacking: Prompt Injection
• Insecure Active Directory Lab For Training (IaC)
• Hacking From the Sky - Penetration Testing UAV
• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1
• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Integrating C3 With Cobalt Strike via ExternalC2 And Studying Their Behavior
• A Golden Image for Our Pentest VMs

red-vs-blue

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021

rsyslog

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

security-onion

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

seh

• Windows Exploit Development: Egg Hunting

self-hosted

• Wiring Frontier Models Into OpenWebUI With Curapi

servers

• 2019 End-of-Year Infrastructure Upgrades

shellcode

• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

siem

• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

sigma

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3

slack

• Resource Efficient Internal Network Honeypots

soapformatter

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

socat

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

spoofing

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

starvation

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

static-analysis

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

sulley

• Detecting Bugs Using Network Protocol Fuzzing

suricata

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3

switching

• DHCP Infrastructure Security: Practical Implementation of DHCP Starvation & DHCP Spoofing

sysmon

• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

thick-clients

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

threat-hunting

• Walkthrough: The detection and analysis of the ransomware incident in IRSeC 2021
• Resource Efficient Internal Network Honeypots
• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas

tooling

• Wiring Frontier Models Into OpenWebUI With Curapi
• 6-Eyed-Spider Post-Exploitation Red-Team Tool

training

• Insecure Active Directory Lab For Training (IaC)

tunneling

• Using Cobalt Strike with Tunnel-Manager for Distributed Hacking

uav

• Hacking From the Sky - Penetration Testing UAV

unicode

• Windows Exploit Development: Unicode and Venetian shellcode techniques

unquoted-service-path

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization

velociraptor

• Finding 0-Days With Claude in Under an Hour
• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

venetian

• Windows Exploit Development: Unicode and Venetian shellcode techniques

virtualization

• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization
• Applied Purple Teaming Series ( The Virtual Environment ) Part 1

vulnerability-research

• Finding 0-Days With Claude in Under an Hour
• LLM Hacking: Prompt Injection
• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization
• Detecting Bugs Using Network Protocol Fuzzing

vulnerable-ad

• Insecure Active Directory Lab For Training (IaC)

wazuh

• Applied Purple Teaming Series ( Weaponize Windows ) Part 2

web

• LLM Hacking: Prompt Injection

webshell

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3

wifi

• Hacking From the Sky - Penetration Testing UAV

windows

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS
• Insecure Active Directory Lab For Training (IaC)
• Mine for Local Privilege Escalation Vulnerabilities in Windows Applications Using Automation and Virtualization
• Applied Purple Teaming Series ( Weaponize Windows ) Part 2
• Studying Sysmon's Ability to Detect Process Injections Using Different Configuration Schemas
• 6-Eyed-Spider Post-Exploitation Red-Team Tool
• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Unicode and Venetian shellcode techniques
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

windows-server

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

winexec

• Windows Exploit Development: Utilizing imported functions (WinExec)

wireless

• Hacking From the Sky - Penetration Testing UAV

wsus

• Inside CVE-2025-59287: SoapFormatter RCE in WSUS

x86

• Windows Exploit Development: Egg Hunting
• Windows Exploit Development: Utilizing imported functions (WinExec)
• Manually Encode Bytes & Shellcode Carving

yaml-injection

• Finding 0-Days With Claude in Under an Hour

yara

• Applied Purple Teaming Series ( Attack, Detect, & Defend ) Part 3