InPosts By SpecterOps Team MembersbyJeff Dimmock·Apr 12, 2018HTTPS Payload and C2 RedirectorsI’ve written rather extensively about the use of redirectors and how they can strengthen your red team assessments. Since my first post on…
InPosts By SpecterOps Team MembersbyJeff Dimmock·Jan 23, 2018Cobalt Strike OPSEC ProfilesPenetration tests and red team assessments often require operators to work multiple potential attack paths or perform multiple checks…
InPosts By SpecterOps Team MembersbyJeff Dimmock·Dec 5, 2017Designing Effective Covert Red Team Attack InfrastructureCovert red team attack infrastructure is a topic I’ve covered many times before, but always only in part. I’ve wanted to write about the…
InPosts By SpecterOps Team MembersbyJeff Dimmock·Oct 3, 2017F’Awk Yeah! Advanced sed and awk Usage (Parsing for Pentesters 3)In a previous post, we (@Sw4mp_f0x and I) discussed the importance of data parsing skills for penetration testers and detailed the basics…
InPosts By SpecterOps Team MembersbyJeff Dimmock·Aug 30, 2017Randomized Malleable C2 Profiles Made EasyMalleable Command and Control (C2) profiles provide red teamers and penetration testers with a wealth of options to modify how Cobalt…
InPosts By SpecterOps Team MembersbyJeff Dimmock·Aug 8, 2017Attack Infrastructure Log Aggregation and MonitoringThis post was co-written by Steve Borosh (@424f424f) and Jeff Dimmock (@bluscreenofjeff).
InPosts By SpecterOps Team MembersbyJeff Dimmock·Jun 13, 2017Serving Random Payloads with Apache mod_rewriteAs testers, we sometimes need some good, old-fashioned trial and error to get things working. Phishing is one of the attacks that commonly…
InPosts By SpecterOps Team MembersbyJeff Dimmock·May 23, 2017How To Pass the Ticket Through SSH TunnelsThe Pass the Ticket (PtT) attack method uses a Kerberos ticket in place of a plaintext password or NTLM hash. Probably the most common uses…
InPosts By SpecterOps Team MembersbyJeff Dimmock·May 2, 2017Red Teaming for Pacific Rim CCDC 2017A few weeks, ago I had the pleasure of participating on the Red Team for Pacific Rim CCDC. This is my third year doing the competition, and…
InPosts By SpecterOps Team MembersbyJeff Dimmock·Apr 11, 2017Slack Bots for Trolls and WorkIn the (belated) spirit of April Fool’s Day, I wanted to slightly diverge from a strictly infosec topic and talk about something that can…
