blog category

Research & Tradecraft

image for Introducing the Funnel of Fidelity

Research & Tradecraft

Introducing the Funnel of Fidelity

By: Jared Atkinson
Nov 20, 2019 • 10 min read
Read Post
image for CVE-2019–12757: Local Privilege Escalation in Symantec Endpoint Protection

Research & Tradecraft

CVE-2019–12757: Local Privilege Escalation in Symantec Endpoint Protection

By: Matt Nelson
Nov 15, 2019 • 5 min read
Read Post
image for When Kirbi walks the Bifrost

Research & Tradecraft

When Kirbi walks the Bifrost

By: Cody Thomas
Nov 14, 2019 • 18 min read
Read Post
image for Modern Wireless Tradecraft Pt III — Management Frame Access Control Lists (MFACLs)

Research & Tradecraft

Modern Wireless Tradecraft Pt III — Management Frame Access Control Lists (MFACLs)

In Part II of this series, we described how improvements in wireless client security have put...

By: Gabriel Ryan
Nov 12, 2019 • 10 min read
Read Post
image for Modern Wireless Tradecraft Pt II — MANA and Known Beacon Attacks

Research & Tradecraft

Modern Wireless Tradecraft Pt II — MANA and Known Beacon Attacks

In Part I of this series, we went over some 802.11 fundamentals and described how the...

By: Gabriel Ryan
Nov 4, 2019 • 11 min read
Read Post
image for Covenant: Developing Custom C2 Communication Protocols

Research & Tradecraft

Covenant: Developing Custom C2 Communication Protocols

By: Ryan Cobb
Oct 30, 2019 • 18 min read
Read Post
image for Modern Wireless Tradecraft Pt I — Basic Rogue AP Theory — Evil Twin and Karma Attacks

Research & Tradecraft

Modern Wireless Tradecraft Pt I — Basic Rogue AP Theory — Evil Twin and Karma Attacks

Introduction The past few years have seen some exciting developments in the subtle art of forcing...

By: Gabriel Ryan
Oct 28, 2019 • 13 min read
Read Post
image for Understanding and Defending Against Access Token Theft: Finding Alternatives to winlogon.exe

Research & Tradecraft

Understanding and Defending Against Access Token Theft: Finding Alternatives to winlogon.exe

Introduction This blogpost will describe the concept of access token manipulation and how this technique can...

By: Justin Bui
Oct 1, 2019 • 14 min read
Read Post
image for Avira Optimizer Local Privilege Escalation

Research & Tradecraft

Avira Optimizer Local Privilege Escalation

By: Matt Nelson
Aug 29, 2019 • 8 min read
Read Post