The socks proxy and browser pivot features of Cobalt Strike are great tools to be able to access internal resources during a red team operation. While the browser pivot is a man-in-the-browser atta...

Powershell Empire is a very powerful post-exploitation framework for Windows environments. The tool has been gaining popularity since its release in 2015. As more red teams and malicious threat act...

I recently participated in the 2016 DEFCON CTF qualifiers. This is a write-up for the XKCD challenge which was in the PWN category. http://download.quals.shallweplayaga.me/be4bf26fcb93f9ab8aa193efa...

SARS - Static Analysis Report on Sessions Summary SARS is an offline static analysis web application penetration testing tool that uses the XML output from Burp Suite and performs a number of secur...

Web Application UserEnum Tool Overview UserEnum makes multiple login attempts with a known bad username followed by multiple login attempts with a a list of usernames. Some web applications check f...

History HoneyPorts was originally released as an opensource project by Paul Asadoorian of PaulDotCom. The original code can be found here: HoneyPorts-0.4 New Features in 0.5 Multihreaded Run...

This was the Network 300 challenge from the recent D-CTF. Not many people solved this one and I got a lot of request for help in the IRC so I figured I would create write up for it. Reading the...