Resources

In June 2012, I released Cobalt Strike, a commercial penetration testing package that picks up where Armitage leaves off. Cobalt Strike is a direct expression of what I

Information Security is a strange field. There are probably few professions with such a wide range of social skills and preferences as the information security

The 2015 National CCDC season started with 100+ teams across 10 regions. Now, there are 10 teams left and they’re headed to the National CCDC

One of my favorite Metasploit Framework modules is psh_web_delivery. You can find it in exploits -> windows -> misc. This module starts a local web

I had a friend come to me with an interesting problem. He had to get a server to make an outbound connection and evade some

Cobalt Strike 3.0 is coming in a few weeks. This upcoming release is the result of a large engineering effort that paralleled my existing efforts

Before developing Cobalt Strike, I conducted interviews with several penetration testing practitioners. I wanted to dig into their process, the tools they used, the gaps

In 2011, I participated in an exercise. The exercise ran for 60 hours straight, forcing the red team to work in shifts. The event was

There are several research projects to collect raw data from red team activity, process this data, and try to turn it into information. In this

BlackHat is about to start in a few days. I think this is an appropriate time to share a non-technical, business only post. There is