blog category

Research & Tradecraft

image for Ghostwriter v2.0 Release

Research & Tradecraft

Ghostwriter v2.0 Release

By: Christopher Maddalena
Nov 20, 2020 • 9 min read
Read Post
image for Sharing the Myth

Research & Tradecraft

Sharing the Myth

By: Cody Thomas
Nov 9, 2020 • 4 min read
Read Post
image for F’Awk Yeah! Advanced sed and awk Usage (Parsing for Pentesters 3)

Research & Tradecraft

F’Awk Yeah! Advanced sed and awk Usage (Parsing for Pentesters 3)

By: Jeff Dimmock
Oct 23, 2020 • 18 min read
Read Post
image for Updates to Ghostwriter: UI and Operation Logs

Research & Tradecraft

Updates to Ghostwriter: UI and Operation Logs

By: Daniel Heinsen
Sep 30, 2020 • 7 min read
Read Post
image for Death from Above: Lateral Movement from Azure to On-Prem AD

Research & Tradecraft

Death from Above: Lateral Movement from Azure to On-Prem AD

Intro I’ve been looking into Azure attack primitives over the past couple of months to gain...

By: BloodHound Team
Aug 17, 2020 • 13 min read
Read Post
image for A Change of Mythic Proportions

Research & Tradecraft

A Change of Mythic Proportions

By: Cody Thomas
Aug 13, 2020 • 7 min read
Read Post
image for Covenant v0.6

Research & Tradecraft

Covenant v0.6

By: Ryan Cobb
Aug 4, 2020 • 5 min read
Read Post
image for Persistent AWS access with role chain juggling

Research & Tradecraft

Persistent AWS access with role chain juggling

By: Daniel Heinsen
Jul 16, 2020 • 7 min read
Read Post
image for Requesting Azure AD Request Tokens on Azure-AD-joined Machines for Browser SSO

Research & Tradecraft

Requesting Azure AD Request Tokens on Azure-AD-joined Machines for Browser SSO

RequestAADRefreshToken is a tool that returns OAuth 2.0 refresh tokens for an Azure-AD-authenticated Windows user (i.e. the machine is joined to...

By: BloodHound Team
Jul 14, 2020 • 8 min read
Read Post