Resources

I see mimikatz as one of the most significant collections of offensive capability available today. Because there’s so much capability, folks are often interested in

<update 03:30pm> I’ve had some feedback that this post describes a concept that is too basic to put into blog form. I can see where this

Two weekends ago, I ran my Advanced Threat Tactics course with a group of 19 people. During the end exercise, one of the teams was frustrated. Their

This is a pretty quick tip, but still useful. When you SSH to a host, you may use the -D flag to setup “dynamic” application-level

One of my favorite features in Cobalt Strike is the system profiler. This web application digs deep into your browser to discover the client-side applications

TL;DR Rapid7 wrote a blog post claiming that their exploits are better. I think the Metasploit Framework’s coverage is fine, but some other vendors do

If you’ve ever had to change a module in the Metasploit Framework, you know the go to place is the modules/ directory off of the

As you may know, the highly anticipated Kali Linux is now available. If you’ve fired it up, you may notice it’s missing a familiar tool.

Mimikatz is a rapidly evolving post-exploitation toolkit by Benjamin Delpy. I call it a post-exploitation toolkit because it has a lot of features, far beyond

Last week, I received an email from Tod B. at Rapid7 stating that the next binary installer of Metasploit would ship without Armitage and msfgui.