From talks to training to our Kennel Club, SpecterOps will be forefront at Black Hat USA Learn more

SpecterOps Blog

The SpecterOps blog covers attack path management, red team operations, detection engineering, and the identity security shifts reshaping the modern enterprise, offering deep technical research and adversary tradecraft from the team behind BloodHound.

Filters

SpecterOps and OpenAI: Helping to Build a New Security Frontier with Daybreak   

AI & Security

SpecterOps and OpenAI: Helping to Build a New Security Frontier with Daybreak   

Today, OpenAI announced that it is expanding access to its frontier AI cybersecurity capabilities for a trusted circle of industry…

Read More
ADCS Attack Paths in BloodHound — Part 2

Research & Tradecraft

ADCS Attack Paths in BloodHound — Part 2

ADCS Attack Paths in BloodHound — Part 2 In Part 1 of this series, we explained how we incorporated Active Directory Certificate Services…

By: Jonas Bülow Knudsen

13 mins
Nemesis 1.0.0

Research & Tradecraft

Nemesis 1.0.0

In August of last year, @tifkin_, @0xdab0, and I released Nemesis, our offensive data enrichment platform. After lots of feedback,…

By: Will Schroeder

10 mins
LSA Whisperer

Research & Tradecraft

LSA Whisperer

Thank you to SpecterOps for supporting this research, to Elad for helping draft this blog, and to Sarah, Daniel, and…

By: Evan McBroom

35 mins
Rooting out Risky SCCM Configs with Misconfiguration Manager

Research & Tradecraft

Rooting out Risky SCCM Configs with Misconfiguration Manager

tl;dr: I wrote a script to identify every TAKEOVER and ELEVATE attack in Misconfiguration Manager. Ever since Garrett Foster, Duane…

By: Chris Thompson

4 mins
Ghostwriter v4.1: The Custom Fields Update

Research & Tradecraft

Ghostwriter v4.1: The Custom Fields Update

Let’s dive into what makes this so exciting! There’s so much to cover that we won’t be offended if you…

By: Christopher Maddalena

7 mins
Getting Intune with Bugs and Tokens: A Journey Through EPM

Research & Tradecraft

Getting Intune with Bugs and Tokens: A Journey Through EPM

Written by Zach Stein & Duane Michael SpecterOps Hackathon Back in January, SpecterOps held our annual hackathon event, loosely based on…

By: Zach Stein

19 mins
Agent Customization in Mythic: Tailoring Tools for Red Team Needs

Research & Tradecraft

Agent Customization in Mythic: Tailoring Tools for Red Team Needs

By: Cody Thomas

9 mins
Pwned by the Mail Carrier

Research & Tradecraft

Pwned by the Mail Carrier

How MS Exchange on-premises compromises Active Directory and what organizations can do to prevent that. At SpecterOps, we recommend our customers…

By: Jonas Bülow Knudsen

28 mins
Summoning RAGnarok With Your Nemesis

Research & Tradecraft

Summoning RAGnarok With Your Nemesis

I hope I’m Not Too Late With the explosion of large language model (LLM) use, everyone is rushing to apply LLMs…

By: Will Schroeder

16 mins

Sign up for the latest updates

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

Sign Up For Updates From SpecterOps

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.