Early bird registration for SO-CON 2026 is now open!  Register Now
blog category

Research & Tradecraft

image for Remote Hash Extraction On Demand Via Host Security Descriptor Modification

Research & Tradecraft

Remote Hash Extraction On Demand Via Host Security Descriptor Modification

By: Will Schroeder
Apr 10, 2018 • 16 min read
Read Post
image for Defenders Think in Graphs Too! Part 2

Research & Tradecraft

Defenders Think in Graphs Too! Part 2

By: Jared Atkinson
Apr 5, 2018 • 24 min read
Read Post
image for 🧙‍ Merlin Adds DLL Agent & PowerShell Invoke-Merlin Script

Research & Tradecraft

🧙‍ Merlin Adds DLL Agent & PowerShell Invoke-Merlin Script

By: Russel Van Tuyl
Mar 14, 2018 • 4 min read
Read Post
image for 🧙‍ Merlin Adds Module Support 🔌

Research & Tradecraft

🧙‍ Merlin Adds Module Support 🔌

By: Russel Van Tuyl
Mar 13, 2018 • 3 min read
Read Post
image for Defenders Think in Graphs Too! Part 1

Research & Tradecraft

Defenders Think in Graphs Too! Part 1

By: Jared Atkinson
Mar 12, 2018 • 7 min read
Read Post
image for A Red Teamer’s Guide to GPOs and OUs

Research & Tradecraft

A Red Teamer’s Guide to GPOs and OUs

By: Andy Robbins
Feb 26, 2018 • 20 min read
Read Post
image for Cobalt Strike OPSEC Profiles

Research & Tradecraft

Cobalt Strike OPSEC Profiles

By: Jeff Dimmock
Jan 22, 2018 • 7 min read
Read Post
image for Introducing Merlin — A cross-platform post-exploitation HTTP/2 Command & Control Tool

Research & Tradecraft

Introducing Merlin — A cross-platform post-exploitation HTTP/2 Command & Control Tool

By: Russel Van Tuyl
Dec 18, 2017 • 8 min read
Read Post
image for Designing Effective Covert Red Team Attack Infrastructure

Research & Tradecraft

Designing Effective Covert Red Team Attack Infrastructure

By: Jeff Dimmock
Dec 4, 2017 • 20 min read
Read Post