InPosts By SpecterOps Team MembersbyElad Shamir·Apr 8, 2025The Renaissance of NTLM Relay Attacks: Everything You Need to KnowNTLM relay attacks have been around for a long time. While many security practitioners think NTLM relay is a solved problem, or at least a…A response icon3A response icon3
InPosts By SpecterOps Team MembersbyElad Shamir·Aug 20, 2024Navigating the Uncharted: A Framework for Attack Path DiscoveryThis is the second post in a series on Identity-Driven Offensive Tradecraft, which is also the focus of the new course we will launch in…
InPosts By SpecterOps Team MembersbyElad Shamir·Jul 22, 2024The Security Principle Every Attacker Needs to FollowEarlier this year, I was tasked with developing a follow-on course for our renowned Adversary Tactics: Red Team Operations course. The new…A response icon1A response icon1
InPosts By SpecterOps Team MembersbyElad Shamir·Jan 25, 2023At the Edge of Tier Zero: The Curious Case of the RODCA response icon1A response icon1
InPosts By SpecterOps Team MembersbyElad Shamir·Jun 17, 2021Shadow Credentials: Abusing Key Trust Account Mapping for TakeoverThe techniques for DACL-based attacks against User and Computer objects in Active Directory have been established for years. If we…A response icon2A response icon2