SpecterOps Blog

Research & Tradecraft

Being a Good Domain Shepherd

Research & Tradecraft

SharpShell: The Worst Scripting Engine of All-Time

Research & Tradecraft

Hunting in Active Directory: Unconstrained Delegation & Forests Trusts

During DerbyCon 2018 this past October, my teammates gave an awesome presentation titled “The Unintended Risks of Trusting Active Directory”. They…

Research & Tradecraft

Not A Security Boundary: Breaking Forest Trusts

Research & Tradecraft

Operational Challenges in Offensive C#

Research & Tradecraft

Another Word on Delegation

Research & Tradecraft

CVE-2018–8414: A Case Study in Responsible Disclosure

Research & Tradecraft

Persistent Credential Theft with Authorization Plugins

Credential theft is often one of the first tactics leveraged by attackers once they’ve escalated privileges on a victim’s machine.…

Research & Tradecraft

CVE-2018–8212: Device Guard/CLM bypass using MSFT_ScriptResource

Device Guard and the enlightened scripting environments that come with it are a lethal combination for disrupting attacker activity. Device…