Research & Tradecraft

Research & Tradecraft

Certified Pre-Owned

L;DR Active Directory Certificate Services has a lot of attack potential! Check out our whitepaper “Certified Pre-Owned:...

By: Will Schroeder

Jun 17, 2021 • 28 min read

Research & Tradecraft

Shadow Credentials: Abusing Key Trust Account Mapping for Account Takeover

By: Elad Shamir

Jun 17, 2021 • 12 min read

Research & Tradecraft

Proxy Windows Tooling via SOCKS

By: Nick Powers

Jun 10, 2021 • 14 min read

Research & Tradecraft

An Introduction to Manual Active Directory Querying with Dsquery and Ldapsearch

Introduction Let’s be honest, BloodHound and PowerView are objectively better tools for querying, enumerating, and investigating Active Directory (AD). They...

By: Hope Walker

Jun 2, 2021 • 21 min read

Research & Tradecraft

Offensive Security Guide to SSH Tunnels and Proxies

By: Russel Van Tuyl

Apr 22, 2021 • 23 min read

Research & Tradecraft

Hacking with Haskell

By: Max Harley

Jan 5, 2021 • 5 min read

Research & Tradecraft

Introducing BloodHound 4.0: The Azure Update

By: Andy Robbins

Nov 20, 2020 • 7 min read

Research & Tradecraft

Ghostwriter v2.0 Release

By: Christopher Maddalena

Nov 20, 2020 • 9 min read

Research & Tradecraft

Sharing the Myth

By: Cody Thomas

Nov 9, 2020 • 4 min read