blog category

Research & Tradecraft

image for Lost in Translation: How L33tspeak Might Throw Sentiment Analysis Models for a Loop

Research & Tradecraft

Lost in Translation: How L33tspeak Might Throw Sentiment Analysis Models for a Loop

TL;DR Sentiment analysis models are used to assess conventional use of language, but what happens when...

By: Max Andreacchi
Jun 24, 2025 • 9 min read
Read Post
image for LLMentary, My Dear Claude: Prompt Engineering an LLM to Perform Word-to-Markdown Conversion for Templated Content

Research & Tradecraft

LLMentary, My Dear Claude: Prompt Engineering an LLM to Perform Word-to-Markdown Conversion for Templated Content

While LLMs can expedite parts of the technical writing/editing process, these tools still require human oversight...

By: Sarah Miles
Jun 20, 2025 • 11 min read
Read Post
image for Ghostwriter v6: Introducing Collaborative Editing

Research & Tradecraft

Ghostwriter v6: Introducing Collaborative Editing

TL;DR: Ghostwriter now supports real-time collaborative editing for observations, findings, and report fields using the YJS...

By: Christopher Maddalena, Alex Parrill
Jun 18, 2025 • 9 min read
Read Post
image for Administrator Protection Review

Research & Tradecraft

Administrator Protection Review

TL;DR Microsoft will be introducing Administrator Protection into Windows 11, so I wanted to have an...

By: Adam Chester
Jun 18, 2025 • 11 min read
Read Post
image for OneLogin, Many Issues: How I Pivoted from a Trial Tenant to Compromising Customer Signing Keys

Research & Tradecraft

OneLogin, Many Issues: How I Pivoted from a Trial Tenant to Compromising Customer Signing Keys

TL;DR OneLogin was found to have security vulnerabilities in its AD Connector service that exposed authentication...

By: Julian Catrambone
Jun 10, 2025 • 11 min read
Read Post
image for Update: Dumping Entra Connect Sync Credentials

Research & Tradecraft

Update: Dumping Entra Connect Sync Credentials

TL;DR Microsoft has recently changed how Entra Connect Sync authenticates to Entra ID. This blog post...

By: Daniel Heinsen
Jun 9, 2025 • 10 min read
Read Post
image for Tokenization Confusion

Research & Tradecraft

Tokenization Confusion

TL;DR Tokenization Confusion: We look at the new Prompt Guard 2 model from Meta, how “confusing”...

By: Adam Chester
Jun 3, 2025 • 20 min read
Read Post
image for Getting the Most Value Out of the OSCP: After the Exam

Research & Tradecraft

Getting the Most Value Out of the OSCP: After the Exam

In the final post of this series, I’ll discuss what to do after your latest exam...

By: kieran croucher
Jun 2, 2025 • 20 min read
Read Post
image for Revisiting COM Hijacking

Research & Tradecraft

Revisiting COM Hijacking

TL;DR: This post shows how COM hijacking can serve as a reliable persistence method while also...

By: Antero Guy
May 28, 2025 • 7 min read
Read Post