SpecterOps Blog

Company Updates

Introducing the Adversary Resilience Methodology — Part Two

Company Updates

Introducing the Adversary Resilience Methodology — Part One

Research & Tradecraft

Reviving DDE: Using OneNote and Excel for Code Execution

Research & Tradecraft

Threat Mitigation Strategies: Observations and Recommendations

Full disclosure: This post is heavy on text. Much of the content is very broad and uses simplified examples. There…

Research & Tradecraft

Cobalt Strike OPSEC Profiles

Research & Tradecraft

Merlin 💖 JavaScript — All up in Your Browsers

Research & Tradecraft

HostEnum: Updates and Usage Guide

HostEnum (formerly Invoke-HostEnum) has received some much needed attention in recent weeks and a new version is now available on the ThreatExpress…

Research & Tradecraft

Introducing Merlin — A cross-platform post-exploitation HTTP/2 Command & Control Tool

Research & Tradecraft

Designing Effective Covert Red Team Attack Infrastructure