blog category

Research & Tradecraft

image for Understanding and Defending Against Access Token Theft: Finding Alternatives to winlogon.exe

Research & Tradecraft

Understanding and Defending Against Access Token Theft: Finding Alternatives to winlogon.exe

Introduction This blogpost will describe the concept of access token manipulation and how this technique can...

By: Justin Bui
Oct 1, 2019 • 14 min read
Read Post
image for Avira Optimizer Local Privilege Escalation

Research & Tradecraft

Avira Optimizer Local Privilege Escalation

By: Matt Nelson
Aug 29, 2019 • 8 min read
Read Post
image for Merlin v0.8.0 Released

Research & Tradecraft

Merlin v0.8.0 Released

By: Russel Van Tuyl
Aug 28, 2019 • 9 min read
Read Post
image for Merlin Goes OPAQUE for Key Exchange

Research & Tradecraft

Merlin Goes OPAQUE for Key Exchange

By: Russel Van Tuyl
Aug 20, 2019 • 15 min read
Read Post
image for Covenant: The Usability Update

Research & Tradecraft

Covenant: The Usability Update

By: Ryan Cobb
Aug 2, 2019 • 10 min read
Read Post
image for Introducing Ghostwriter

Research & Tradecraft

Introducing Ghostwriter

By: Christopher Maddalena
Jul 30, 2019 • 13 min read
Read Post
image for Introducing Ghostwriter: Part 2

Research & Tradecraft

Introducing Ghostwriter: Part 2

By: Christopher Maddalena
Jul 30, 2019 • 10 min read
Read Post
image for CVE-2019–13382: Local Privilege Escalation in SnagIt

Research & Tradecraft

CVE-2019–13382: Local Privilege Escalation in SnagIt

By: Matt Nelson
Jul 24, 2019 • 9 min read
Read Post
image for CVE-2019–13142: Razer Surround 1.1.63.0 EoP

Research & Tradecraft

CVE-2019–13142: Razer Surround 1.1.63.0 EoP

By: Matt Nelson
Jul 5, 2019 • 5 min read
Read Post