blog category
Research & Tradecraft
Research & Tradecraft
Encrypting Strings at Compile Time
Thank you to SpecterOps for supporting this research and to Duane and Matt for proofreading and...
By: Evan McBroom
Jul 20, 2022 • 5 min read
Read Post
Research & Tradecraft
Part 1: Discovering API Function Usage through Source Code Review
By: Jared Atkinson
Jul 19, 2022 • 24 min read
Read Post
Research & Tradecraft
Dealing with Failure: Failure Escalation Policy in CLR Hosts
Offensive tooling built upon the .NET framework and its runtime environment, the Common Language Runtime (CLR), is...
By: Jack Ullrich
Jul 13, 2022 • 12 min read
Read Post
Research & Tradecraft
Years ago I was chatting with a few experienced red teamers and one was lamenting token...
By: Will Schroeder
Jul 7, 2022 • 14 min read
Read Post
Research & Tradecraft
Relaying NTLM Authentication from SCCM Clients
tl;dr: Seriously, please disable NTLM I recently learned that you can coerce NTLM authentication from SCCM servers...
By: Chris Thompson
Jun 30, 2022 • 16 min read
Read Post
Research & Tradecraft
The Phantom Credentials of SCCM: Why the NAA Won’t Die
TL;DR — Stop Using Network Access Accounts! If a Windows machine has ever been an SCCM client, there...
By: Duane Michael
Jun 28, 2022 • 10 min read
Read Post
Research & Tradecraft
Understanding the Function Call Stack
There’s more than meets the eye under the function call hood This post is based on a...
By: Jared Atkinson
Jun 27, 2022 • 11 min read
Read Post
Research & Tradecraft
The Ghostwriter team recently released v3.0.0. This release represents a significant milestone for the project, and...