I'm guilty of this, and so is every sysadmin I've ever been on who has had notepad++ installed. Pasting credentials, access tokens, ssh keys, and other useful information in "temporary" tabs that they forget to delete.
I'm guilty of this, and so is every sysadmin I've ever been on who has had notepad++ installed. Pasting credentials, access tokens, ssh keys, and other useful information in "temporary" tabs that they forget to delete.
github.com/xillwillx/Mo...
PuTTY stores creds in
HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\
github.com/xillwillx/Mo...
PuTTY stores creds in
HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\
youtu.be/l8nkXCOYQC4?...
Inspiration for Cobalt Strike's 'argue' command:
hstechdocs.helpsystems.com/manuals/coba...
Public POC: kwcsec.gitbook.io/the-red-team...
youtu.be/l8nkXCOYQC4?...
Inspiration for Cobalt Strike's 'argue' command:
hstechdocs.helpsystems.com/manuals/coba...
Public POC: kwcsec.gitbook.io/the-red-team...
Tool: github.com/danielbohann...
Paper: services.google.com/fh/files/mis...
Notes: www.ired.team/offensive-se...
www.youtube.com/watch?v=mej5...
Tool: github.com/danielbohann...
Paper: services.google.com/fh/files/mis...
Notes: www.ired.team/offensive-se...
www.youtube.com/watch?v=mej5...
T1027.010 Obfuscated Files or Information: Command Obfuscation
attack.mitre.org/techniques/T...
T1027.010 Obfuscated Files or Information: Command Obfuscation
attack.mitre.org/techniques/T...
gosecure.ai/blog/2025/03...
gosecure.ai/blog/2025/03...
www.youtube.com/watch?v=AcG4...
36:38 starts offense discussion.
42:08 starts Cobalt Strike driving demo
www.youtube.com/watch?v=AcG4...
36:38 starts offense discussion.
42:08 starts Cobalt Strike driving demo
Cortana: Rise of the Automated Red Team
www.youtube.com/watch?v=Eca1...
Topics covered included agent programming, positive control ideas, but also the more pragmatic (then) other stuff.
Cortana: Rise of the Automated Red Team
www.youtube.com/watch?v=Eca1...
Topics covered included agent programming, positive control ideas, but also the more pragmatic (then) other stuff.
www.cobaltstrike.com/blog/cortana...
www.cobaltstrike.com/blog/cortana...
www.youtube.com/watch?v=ZooT...
Details at: x.com/_xpn_/status...
www.youtube.com/watch?v=ZooT...
Details at: x.com/_xpn_/status...
1. Intro to SuperMega Loader Lab (Framework to play w/ EXE Injection techniques)
blog.deeb.ch/posts/superm...
2. How EDR works (Background info)
blog.deeb.ch/posts/how-ed...
3. "Cordyceps" (an EXE shellcode Injection technique)
blog.deeb.ch/posts/exe-in...
1. Intro to SuperMega Loader Lab (Framework to play w/ EXE Injection techniques)
blog.deeb.ch/posts/superm...
2. How EDR works (Background info)
blog.deeb.ch/posts/how-ed...
3. "Cordyceps" (an EXE shellcode Injection technique)
blog.deeb.ch/posts/exe-in...
Talk: www.youtube.com/watch?v=SYM4...
Slides: conference.hitb.org/hitbsecconf2...
Code: github.com/dobin/SuperM...
Talk: www.youtube.com/watch?v=SYM4...
Slides: conference.hitb.org/hitbsecconf2...
Code: github.com/dobin/SuperM...
Railgun was introduced to the Metasploit Framework via a mailing list post in June 2010 by Patrick HVE:
seclists.org/metasploit/2...
Railgun was introduced to the Metasploit Framework via a mailing list post in June 2010 by Patrick HVE:
seclists.org/metasploit/2...
x.com/C5pider/stat...
x.com/C5pider/stat...
secret.club/2023/12/24/r...
github.com/thesecretclu...
VIA x.com/mrexodia and github.com/oopsmishap
secret.club/2023/12/24/r...
github.com/thesecretclu...
VIA x.com/mrexodia and github.com/oopsmishap
VIA x.com/McGrewSecurity
www.youtube.com/watch?v=807m...
VIA x.com/McGrewSecurity
www.youtube.com/watch?v=807m...
medium.com/@nisaprmst/s...
medium.com/@nisaprmst/s...