A group of targeted attacks takes a different spin on methods first seen in PlugX APT operations.

Infection Monkey - An open-source adversary emulation platform - guardicore/monkey

Open EDR public repository. Contribute to ComodoSecurity/openedr development by creating an account on GitHub.

If you follow me on Twitter, you probably know that I developed my own Windows privilege escalation enumeration script - PrivescCheck - which is a sort of updated and extended version of the famous PowerUp. If you have ever run this script on Windows 7 or…

We compiled a list of several techniques for improved exploition of MSSQL injections. All the vectors have been tested on at least three of the latest versions of Microsoft SQL Server: 2019, 2017, 2016SP2. DNS Out-of-Band If confronted with a fully blind…

In this article I’m describing yet another way to bypass AV detection/blocking access to LSASS process for credential dumping.

In 2016 we released BloodHound, which helps attackers and defenders alike identify and execute or eliminate attack paths in Active Directory. Since then, BloodHound's collection and analysis capabilities have been limited to Active Directory and domain-joined…

A Repository dedicated to creating modular and automated penetration testing frameworks utilizing Jupyter Notebooks - GitHub - obheda12/JupyterPen: A Repository dedicated to creating modular and au...

State-of-the-art native debugging tools. Contribute to HyperDbg/HyperDbg development by creating an account on GitHub.

My experiments in weaponizing Nim (https://nim-lang.org/) - byt3bl33d3r/OffensiveNim

"Use ImageMagick® to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) includ...

On a whim, I tossed this into the address field of the registrant data of a domain so it’d appear in whois records…

Technical details about how to pivot through a Microsoft SQL Server . Using mssql as a proxy for lateral movement

How to run Windows 10 on ARM or Ubuntu for ARM64 in QEMU on Apple Silicon Mac - README.en.md

Google has found thousands of security vulnerabilities and other bugs using Fuzzing. Now we are introducing the Atheris fuzzing engine.