zhonb

We think of WASM as a mechanism to run compiled code in your browser, but what if we shimmed in all the host APIs necessary to run full implants with ALL logic entirely in the WASM VM? This post walks through what that looks like. praetorian.com/blog/wasmforge… #wasm #malware #sliver

Intercept Windows Named Pipes comms with HTTP proxy. pipe-intercept - a tool by Gabriel Sztejnworcel (@sztejnworcel) Source: github.com/gabriel-sztejn… #redteam #blueteam #maldev #malwaredevelopment

@TJ_Null @BsidesHbg Are the slides or the presentation public?

At @BsidesHbg yesterday I did a talk about how I built a modular asset discovery framework by using open source tooling to help automate my work when handling large engagements. That tool is called cygor: github.com/tjnull/cygor

Offensivecon's talks are now available on our YouTube channel! 🔗 buff.ly/g63xgm5

This is some really nice work. A deep dive into what legitimate Windows network traffic looks like and how Impacket differs. Lots of goodness for both red and blue. Nice job @abdo_mhanni!

Keys to JWT Assessments - From a Cheat Sheet to a Deep Dive - Aaron James @TrustedSec trustedsec.com/blog/keys-to-j…

ADPulse. Active Directory security auditing tool that connects to a domain controller via LDAP(S), runs 35 automated security checks, and produces detailed reports in console, JSON, and HTML formats github.com/dievus/ADPulse

I found an interesting RCE due to unsafe deserialization in qwik js framework. I'll post the writeup analysis github.com/QwikDev/qwik/s…

Converts pfSense and OPNsense firewall rules into flow diagrams github.com/olivierb46/PyF…

ShareHound: Mapping rights of network shares using BloodHound OpenGraph github.com/p0dalirius/sha…

GitHub - CyberSecurityUP/Awesome-Red-Team-Operations github.com/CyberSecurityU…

Blueprints for cybersecurity automation workflows github.com/CyberSecurityU…

Proxy tool like burpsuite under your developer tools in chrome, dont you guys think this is crazy!!!! Check it out: github.com/bscript/rep?ta… #bugbounty #bugbountytips

Red teamers, no need to “pull” clipboard data when Windows already saves it all on disk for you in a neat little file 🗿 (including past clipboard items) inversecos.com/2022/05/how-to…

Convert a Docker image into a standalone executable you can run or share

''Phishing despite FIDO, leveraging a novel technique based on the Device Code Flow'' #infosec #pentest #redteam #blueteam denniskniep.github.io/posts/09-devic…

I just published a blog post where I try to explain and demystify Kerberos relay attacks. I hope it’s a good and comprehensive starting point for anyone looking to learn more about this topic. ➡️decoder.cloud/2025/04/24/fro…

This has been a LONG time coming! This is just the beginning though :) I'll be recording more for updates, features, workflow updates, and yes - a developer series too! Be sure to let me know what you do/don't like about this format and what kinds of things you'd like to see!

My emulator is currently the #1 trending C++ project on GitHub. Thanks to everyone for your support 🙌 github.com/momo5502/emula…

This @sensepost blog post is really useful for debugging AD CS attacks 🎉 x.com/sensepost/stat… We also encountered some additional causes for these errors: • Inaccessible/expired revocation lists (CLIENT_NOT_TRUSTED) • Failed autoenrollment on DC (PADATA_TYPE_NOSUPP)