SpecterOps Blog

BloodHound

Your new best friend: Introducing BloodHound Community Edition

Summary SpecterOps is pleased to announce BloodHound Community Edition (CE) will be available in early access on August 8, 2023!…

Research & Tradecraft

On (Structured) Data

Introduction The offensive security industry is a curious one. On the one hand, we are ahead in various trends (or…

Research & Tradecraft

Performance, Diagnostics, and WMI

Windows offers tons of useful tools that administrators can leverage to perform their daily jobs. A lot of times, those…

Research & Tradecraft

Sowing Chaos and Reaping Rewards in Confluence and Jira

Introduction Let me paint a picture for you. You’re on a red team operation, operating from your favorite C2, and…

Industry Insights

What is Tier Zero — Part 1

What is Tier Zero — Part 1 Tier Zero is a crucial group of assets in Active Directory (AD) and Azure. Its purpose…

Research & Tradecraft

Understanding Telemetry: Kernel Callbacks

Introduction I’ve published blogs around telemetry mechanisms like Event Tracing for Windows (ETW) in the Uncovering Windows Events series, but…

Research & Tradecraft

Less SmartScreen More Caffeine: (Ab)Using ClickOnce for Trusted Code Execution

The contents of this blogpost was written by Nick Powers (@zyn3rgy) and Steven Flores (@0xthirteen), and is a written version…

Research & Tradecraft

On Detection: From Tactical to Functional

In his 1931 paper “A Non-Aristotelian System and Its Necessity for Rigour in Mathematics and Physics,” Mathematician Alfred Korzybski introduced…

Research & Tradecraft

Part 8: Tool Graph