SpecterOps Blog

Research & Tradecraft

Part 10: Implicit Process Create

Research & Tradecraft

Challenges In Post-Exploitation Workflows

In our previous post, we talked about the problem of structured data in the post-exploitation community. We touched on the…

Research & Tradecraft

Koh: The Token Stealer

Years ago I was chatting with a few experienced red teamers and one was lamenting token abuse. Specifically, they wanted…

Research & Tradecraft

Introducing BloodHound 4.1 — The Three Headed Hound

Introducing BloodHound 4.1 — The Three Headed Hound Prior Work Analyzing Active Directory attack paths using graph theory is not a new concept.…

Research & Tradecraft

Evadere Classifications

Introduction The term evasion is derived from the Latin word “evadere” which means — “To escape, to get away.” The DOD defines…

BloodHound

The Attack Path Management Manifesto

Research & Tradecraft

Persistent AWS access with role chain juggling

Research & Tradecraft

Satellite: A Payload and Proxy Service for Red Team Operations

Research & Tradecraft

Abusing Bias Part One: Infrastructure

I think about my social engineering skills as a byproduct of living a rebellious life. My friends were busy when…