Hey Dirk-jan I've added Shadow Credentials options to krbrelay.py, however using coercion + AD DNS I cannot seem to relay to LDAP. Do you know if this is a protocol limitation? github.com/dirkjanm/krbre…

There's no such thing as a "main" thread in a process on Windows. TIL

RedTeamTP is now public, link below. The repo is a proof of concept of how to utilize GitHub Actions to automate offensive infrastructure. Looking forward to presenting the tool soon HackSpaceCon #HSC2025 #HackSpaceCon github.com/CultCornholio/…

For other people wondering about the shellcode part mem2019.github.io/jekyll/update/… chovid99.github.io/posts/hitcon-c…

What if you skipped VirtualAlloc, skipped WriteProcessMemory and still got code execution? We explored process injection using nothing but thread context. Full write-up + PoCs: blog.fndsec.net/2025/05/16/the…

Microsoft: *adds more security boundaries* Bobby Cooke : hold my 🍺(probably)

you love to see it 💯

I touched some asphalt 💪

So since Microsoft retired MSOnline and AADInternals no longer works, what do people use to compromise Azure?

Malware development =/= red teaming. If you want to land an offensive security/RT role, go get some fundamental training as an operator. Good places to start are Hack The Box and Zero-Point Security 's RTO certifications

Some people out here posting old tech and slapping a new sticker on it, steal other people's code and publish it as their own original work, acting big because they've got a bunch of skids in their comments, yet offended when actual infosec sees right through the bs. Be humble

Cerbersec Here is the actual code if anyone wants to play with it: github.com/winterknife/EV… Just a random experiment lol In theory, it could be helpful to craft a multi-mode PE that branches based on CPL idk

The difference between innovating or playing catch-up aff-wg.org/2025/06/26/bea…

Responder not working? LLMNR/NBNS enabled in the environment? Check for ADIDNS wildcard records preventing the fallback to older protocols. #redteam #redteamtips

Went down the buying-a-car rabbithole... to EV or not to EV that's the question. Maybe a plugin hybrid is the answer. So many options

It's been 3 weeks. I have now consumed all of car YouTube. Help

🤔

We all know the “this is fine” meme—when it comes to burnout, it’s anything but. In our newest blog, confused_binary serves up practical tips to help testers and teams recognize, manage, and avoid going up in flames. Read it now! trustedsec.com/blog/pen-testi…