R4t·Oct 28How I Made Windows Defender Look Silly: Bypassing AppLocker and CLM Bypass for FunLet’s set the scene. You’re on a red team engagement (or in your home lab), you’ve got a shell, and you want to run the holy grail of…
ColdByte·Oct 9Hack The Box: Remote_Access_Regret — SherlockFollow how I investigated a Windows attack through PowerShell event logs, uncovering AMSI bypass, anti-forensic techniques, and more.
InFalconForcebyOlaf Hartong·Aug 26I’m in your logs now: deceiving analysts and blinding EDRsIntroductionA response icon1A response icon1
LIKITH GAJULA·Aug 16“DLL vs EXE” A hacker’s perspectiveEver confused between what are DLLs and EXEs? Let me walk you through them from a hacker’s perspective.
InOVERHACKbyEdo Maland·Jun 13Offensive PowerShell for Red Teamer with Defense Evasion TechniquesThis post cover how PowerShell becomes a main tool in offensive operations starting with the weaponization, delivery and post-exploitation.
sh1nz3r·Apr 25A Beginner’s Guide to Evading Modern Windows DefensesBy: ShinzerA response icon1A response icon1
exploiter-taz·Apr 11What Every Hacker Should Know About EDR Telemetry> Disclaimer ⚠️: This content is for defensive research and educational purposes. > Understanding detection mechanisms helps build better…
CipherX9F Security·Mar 17SOC306 — Critical System File DeletionToday, we will be analyzing and investigating a Linux security incident on a host named Dominic (Ubuntu 20.04.02). This alert was triggered…
Luke Thompson·Mar 16PowerShell Obfuscation via Seeded Get-Random — Part 2Disclaimer: This article is written from a security research perspective. The author is not responsible for any negative impacts of this…
