Latest Articles
Here phishy phishy : How to recognize phishing
Here phishy phishy... - source: Combell According to our latest research, which can be seen in this video , an…
Unmanaged file searching with Filesearcher.exe
During our red team engagements, we are often reliant on a command and control infrastructure. Typically these infrastructures are capable…
Under the hood: Hiding data in JPEG images
Ever wondered how tools like ExifTool or stegano programs work under the hood? Ever wanted to create your own program…
Debugging DLL’s – 3 techniques to help you get started
During some redteam engagements, we find ourselves in the need of writing DLL's. However, debugging DLL's is not as easy…
Dynamic Invocation in .NET to bypass hooks
This blogpost showcases several methods of dynamic invocation that can be leveraged to bypass inline and IAT hooks.
Tap tap… is this thing on? Creating a notification-service for Cobalt-Strike
Ever needed a notifier when a new beacon checks in? Don't want to keep checking your Cobalt-Strike server every 5…
I Solemnly Swear I Am Up To No Good. Introducing the Marauders Map
This blogpost will be a bit different, as it's going to tell a bit of a story... In this blogpost…
Reviewing an ISO 27001 certificate: a checklist
The ISO 27001 Certification silver bullet An ISO 27001 certification is often used by a supplier to assure its customers…