SpecterOps Blog

Research & Tradecraft

War Never Changes: Attacks Against WPA3’s “Enhanced Open” — Part 3: OWE Nearly Indistinguishable From Open Wireless In Terms of Risk

In early 2019, myself and fellow Denver-based researcher Steve Darracott (@theDarracott) set out to answer the question — “is Opportunistic Wireless…

BloodHound

Introducing BloodHound 3.0

Intro After several months of development and quality testing, we are proud to announce the release of BloodHound 3.0! With…

Research & Tradecraft

Capability Abstraction

Research & Tradecraft

Ghostwriter: 2020 Feature Update

We introduced Ghostwriter in July 2019 when we felt it was a good v1.0, but active development never slowed. If you missed…

Research & Tradecraft

Move faster, Stay longer

Research & Tradecraft

Revisiting Remote Desktop Lateral Movement

It’s no secret that attackers are looking for new techniques to execute lateral movement. However, there are only a handful…

Research & Tradecraft

Satellite: A Payload and Proxy Service for Red Team Operations

Research & Tradecraft

War Never Changes: Attacks Against WPA3’s Enhanced Open — Part 2: Understanding OWE

In early 2019, myself and fellow Denver-based researcher Steve Darracott (@theDarracott) set out to answer the question — “is Opportunistic Wireless…

Research & Tradecraft

War Never Changes: Attacks Against WPA3’s “Enhanced Open” — Part 1: How We Got Here

In early 2019, myself and fellow Denver-based researcher Steve Darracott (@theDarracott) set out to answer the question — “is Opportunistic Wireless…