Beacon – A PCI Compliant Payload for Cobalt Strike
TL;DR Beacon is a new Cobalt Strike payload that uses DNS to reduce the need to talk directly to Cobalt Strike. Beacon helps you mimic
Beacon – An Operator’s Guide
Beacon is a payload in Cobalt Strike that has a lot of communication flexibility. This blog post is not a replacement for the documentation, but rather
Beacon Object File ADVENTURES: Some Zerologon, SMBGhost, and Situational Awareness
Cobalt Strike can use PowerShell, .NET, and Reflective DLLs for its post-exploitation features. This is the weaponization problem set. How to take things, developed outside
Behind the Mask: Spoofing Call Stacks Dynamically with Timers
This blog introduces a PoC technique for spoofing call stacks using timers. Prior to our implant sleeping, we can queue up timers to overwrite its
Beware of Slow Downloads
I often receive emails that ask about slow file downloads with the Beacon payload. Here are the symptoms: When I get these emails, I usually
Black Hat 2025
Visit us at Black Hat US 2025 Las Vegas, Nevada [...]Read More... from Black Hat 2025
Black Hat Asia 2026
Black Hat Asia 2026 is a leading cybersecurity conference in Singapore, featuring advanced technical trainings, expert‑led research briefings, hands‑on tool demos, and industry networking. The
Black Hat Asia Speaking Session: Designing Effective RL Gyms for Security Research
Event: Black Hat Asia Location: Marina Bay Sands, Singapore (Thought Leadership Stage 1). Format: Sponsored Session Track: AI, ML & Data Science Designing Effective RL Gyms for
Black Hat Europe (London) 2025
Excel London, One Western Gateway Royal Victoria Dock, London E16 1XL Offensive Security Representation: Dima van de Wouw & William Burgess Stop By Booth #117
Black Hat Session: Next-Generation Post-Exploitation in Cobalt Strike
Event: Black Hat USA Location: Las Vegas, Nevada Format: Arsenal Track: Malware Recent advances in Windows AI/ML APIs now enable the direct integration of AI/ML models