Resources

SpecterOps Projects
Free and Open Source

Blog

Recent Posts

See All Posts

Blog

I’d TAP That Pass

Summary: Given that: Temporary Access Passes (TAP) are enabled in the Azure AD tenantAND You have an authentication admin role in Azure AD You can assign […]

Abusing Azure App Service Managed Identity Assignments

Intro Azure App Service is a Platform-as-a-Service product that promises to improve web application deployment, […]

Telemetry Layering

Introduction Creating detections can be challenging. There often isn’t a “simple” way to detect something, […]

Research

White Papers

Certified Pre-Owned

An ACE Up the Sleeve

A Voyage to Uncovering Telemetry

Subverting Sysmon

A Process is No One

Subverting Trust in Windows

Free & Open Source

Affiliated Toolsets

BloodHound

Simulation

Explore

Merlin

Simulation

Explore

GhostManager

Simulation

Explore

Covenant

Simulation

Explore

Mythic

Simulation

Explore

SharpChromium

WireTap

SharpRDP

StayKit

MoveKit

PowerSCCM

Uproot

PowerForensics

CimSweep

ACE

SharpSploit

PowerSploit

PortPlow.io

KeeThief

Malleable C2

GhostPack

Empire

Domain Hunter

Cs2modrewrite

MythicAgents

Industry Knowledge

Vulnerability Acknowledgements

Vulnerability Participants Reference

CVE-2020-14979 Matt Hand Go to Reference CVE-2020-10747 Julian Catrambone Go to Reference CVE-2020-9913 Cody Thomas Go to Reference CVE-2020-8884 Lee Christensen Go to Reference CVE-2020-0583 Lee Christensen Go to Reference CVE-2019-18631 Lee Christensen Go to Reference CVE-2019–12757 Matt Nelson Go to Reference CVE-2019-13382 Matt Nelson Go to Reference CVE-2019–13142 Matt Nelson Go to Reference CVE-2019-0683 Will Schroeder, Lee Christensen Go to Reference CVE-2018-8200 Matt Graeber Go to Reference CVE-2018-8204 Matt Graeber, Matt Nelson Go to Reference CVE-2018-8414 Matt Nelson Go to Reference CVE-2018-0854 Matt Graeber Go to Reference CVE-2018-8222 Matt Graeber Go to Reference CVE-2018-8221 Matt Graeber Go to Reference CVE-2018-8212 Matt Nelson Go to Reference CVE-2018-8211 Matt Graeber Go to Reference CVE-2018-8126 Matt Nelson Go to Reference CVE-2018-0958 Lee Christensen Go to Reference CVE-2018-0902 Matt Nelson Go to Reference CVE-2018-0884 Lee Christensen Go to Reference CVE-2018-0827 Matt Nelson Go to Reference Lee Christensen Go to Reference CVE-2017-8715 Matt Nelson Go to Reference CVE-2017-8625 Matt Nelson Go to Reference CVE-2017-0219 Matt Graeber Go to Reference CVE-2017-0218 Matt Graeber, Matt Nelson Go to Reference CVE-2017-0216 Matt Graeber Go to Reference CVE-2017-0215 Matt Nelson Go to Reference CVE-2017-0007 Matt Nelson Go to Reference CVE-2016-3346 Matt Graeber Go to Reference ADV170021 Matt Nelson Go to Reference

Resources

Datasheets

SpecterOps Services

SpecterOps Training

BloodHound Enterprise

Get Started

Defend Against
Advanced Attacks

Talk to an Expert