Blog
When I participate in an exercise, with multiple target networks and a large red team, I favor splitting the team up into cells. Each cell
The Access Management Team [Shell Sherpas]
Blog
In June 2012, I announced Cobalt Strike to the world. Thanks to Cobalt Strike‘s users, I build and research offensive technologies, full-time, and have done so for the past
Blog
I see egress as one of the biggest pains in the offensive space. If your target has zero egress controls—don’t worry about anything I have
Blog
When a user launches Armitage or Cobalt Strike on Windows and presses Start MSF, they’re presented with a curious error. It states: You must connect
Blog
Mimikatz is a rapidly evolving post-exploitation toolkit by Benjamin Delpy. I call it a post-exploitation toolkit because it has a lot of features, far beyond
Blog
For some people, programming comes naturally to them. For others, it’s a struggle or something that doesn’t click with the way they think. The same
Blog
High latency communication allows you to conduct operations on your target’s network, without detection, for a long time. An example of high-latency communication is a
Blog
I spend a lot of time on the road in March and April—using my tools. During these months, I take careful notes of the usability
Blog
Information Security is a strange field. There are probably few professions with such a wide range of social skills and preferences as the information security
Blog
Meterpreter’s getsystem command is taken for granted. Type getsystem and magically Meterpreter elevates you from a local administrator to the SYSTEM user. What’s really happening