Research & Tradecraft

Research & Tradecraft

An Introduction to Manual Active Directory Querying with Dsquery and Ldapsearch

Introduction Let’s be honest, BloodHound and PowerView are objectively better tools for querying, enumerating, and investigating Active Directory (AD). They...

Jun 2, 2021 • 21 min read

Research & Tradecraft

Offensive Security Guide to SSH Tunnels and Proxies

Apr 22, 2021 • 23 min read

Research & Tradecraft

Hacking with Haskell

Jan 5, 2021 • 5 min read

Research & Tradecraft

Introducing BloodHound 4.0: The Azure Update

Nov 20, 2020 • 7 min read

Research & Tradecraft

Ghostwriter v2.0 Release

Nov 20, 2020 • 9 min read

Research & Tradecraft

Sharing the Myth

Nov 9, 2020 • 4 min read

Research & Tradecraft

Updates to Ghostwriter: UI and Operation Logs

Sep 30, 2020 • 7 min read

Research & Tradecraft

Death from Above: Lateral Movement from Azure to On-Prem AD

Intro I’ve been looking into Azure attack primitives over the past couple of months to gain...

Aug 17, 2020 • 13 min read

Research & Tradecraft

A Change of Mythic Proportions

Aug 13, 2020 • 7 min read