blog category

Research & Tradecraft

image for Capability Abstraction

Research & Tradecraft

Capability Abstraction

By: Jared Atkinson
Feb 6, 2020 • 15 min read
Read Post
image for Ghostwriter: 2020 Feature Update

Research & Tradecraft

Ghostwriter: 2020 Feature Update

We introduced Ghostwriter in July 2019 when we felt it was a good v1.0, but active development never...

By: Christopher Maddalena
Jan 29, 2020 • 8 min read
Read Post
image for Move faster, Stay longer

Research & Tradecraft

Move faster, Stay longer

By: Steven Flores
Jan 27, 2020 • 20 min read
Read Post
image for Revisiting Remote Desktop Lateral Movement

Research & Tradecraft

Revisiting Remote Desktop Lateral Movement

It’s no secret that attackers are looking for new techniques to execute lateral movement. However, there...

By: Steven Flores
Jan 22, 2020 • 8 min read
Read Post
image for Satellite: A Payload and Proxy Service for Red Team Operations

Research & Tradecraft

Satellite: A Payload and Proxy Service for Red Team Operations

By: Max Harley
Jan 21, 2020 • 8 min read
Read Post
image for War Never Changes: Attacks Against WPA3’s Enhanced Open — Part 2: Understanding OWE

Research & Tradecraft

War Never Changes: Attacks Against WPA3’s Enhanced Open — Part 2: Understanding OWE

In early 2019, myself and fellow Denver-based researcher Steve Darracott (@theDarracott) set out to answer the question...

By: Gabriel Ryan
Dec 20, 2019 • 19 min read
Read Post
image for War Never Changes: Attacks Against WPA3’s “Enhanced Open” — Part 1: How We Got Here

Research & Tradecraft

War Never Changes: Attacks Against WPA3’s “Enhanced Open” — Part 1: How We Got Here

In early 2019, myself and fellow Denver-based researcher Steve Darracott (@theDarracott) set out to answer the question...

By: Gabriel Ryan
Dec 9, 2019 • 13 min read
Read Post
image for Attacking FreeIPA — Part II Enumeration

Research & Tradecraft

Attacking FreeIPA — Part II Enumeration

In Part I of this series, we reviewed some of the background and underlying technologies utilized...

By: Julian Catrambone
Dec 4, 2019 • 10 min read
Read Post
image for Attacking FreeIPA — Part I Authentication

Research & Tradecraft

Attacking FreeIPA — Part I Authentication

Recently I had the opportunity to operate inside of an environment managed by FreeIPA. I wanted...

By: Julian Catrambone
Nov 25, 2019 • 9 min read
Read Post