Blog
Last week saw the release of Metasploit 4.10. Those who use Armitage and Cobalt Strike noticed that neither tool worked after running msfupdate on Kali
That was a fun fire drill…
Blog
Cobalt Strike 2.0 introduced Malleable C2, a technology to redefine network indicators in the Beacon payload. What does this mean for you? It means you
Blog
Morning Catch is a VMware virtual machine, similar to Metasploitable, to demonstrate and teach about targeted client-side attacks and post-exploitation. On this virtual machine, you
Blog
Back in May, I wrote up some impressions about Meterpreter’s Kiwi extension. It’s Mimikatz 2.0, complete with its ability to generate a Kerberos “Golden Ticket” with
Blog
The Veil Framework is a collection of red team tools, focused on evading detection. The Veil Evasion project is a tool to generate artifacts that
Blog
I define threat replication as a penetration test that looks like an attack from an APT actor. Assessments that involve threat replication are more than
Blog
I spend a lot of time thinking about what my tools can and can’t do. One of the weakest points for penetration testing tools is
Blog
When I participate in an exercise, with multiple target networks and a large red team, I favor splitting the team up into cells. Each cell
Blog
In June 2012, I announced Cobalt Strike to the world. Thanks to Cobalt Strike‘s users, I build and research offensive technologies, full-time, and have done so for the past
Blog
I see egress as one of the biggest pains in the offensive space. If your target has zero egress controls—don’t worry about anything I have