Resources

If you recently updated your penetration testing environment, it’s possible you were greeted with a special surprise. Cobalt Strike and its team server will no

I wrote Cobalt Strike and I take it for granted that my users know where things are. This doesn’t come from nowhere though. The users

Joel Spolsky is one of my favorite writers on the topic of software development. He coined a 12-step Joel Test to determine if your company

One of my favorite features in Cobalt Strike is its ability to pivot over named pipes. A named pipe is a way for two programs

Cobalt Strike’s process to inject shellcode, via PowerShell, does not work with the latest Windows 10 update (v1803). While it’s possible to work without this

TL;DR a certificate for part of the Cobalt Strike update infrastructure changed. Download the 20200511 distribution package to avoid certificate verification errors. If you recently

Following the 4.4 release, you may have noticed a warning message when starting your teamserver: The missing file is optional and its absence does not

James Webb has an interesting blog post on how to use Armitage to manage a pen test through Amazon’s Elastic Computing Cloud. He does a

Some hackers only think about access. It’s the precious. How to get that first shell? I don’t care too much about this. I’m concerned about

A user-driven attack is an attack that relies on a feature to get code execution. Most penetration testers I know rely on user-driven attacks over