Blog

Read Article

21 May 2024 Eito Tamura

Microsoft Entra Connect: Connect Sync vs Cloud Sync through a hacker's view

The distinction between traditional Connect Sync and the new Cloud Sync lies in the shifting TTPs from a hacker's perspective.

Read More

Read Article

29 April 2024 Claudio Contin

LSASS rings KsecDD ext. 0

Overview of the recent KexecDD exploit.

Read More

Read Article

3 April 2024 Claudio Contin

Adventures in Stegoland

Adventures with a stego shellcode loader.

Read More

Read Article

27 March 2024 Eito Tamura

Abusing MiniFilter Altitude to blind EDR

A way of blinding EDR using minifilter altitude.

Read More

Read Article

3 March 2024 Claudio Contin

Automate evasion and compilation of tools

An intro to automated evasion and compilation of .NET offensive tools.

Read More

Read Article

27 February 2024 Eito Tamura

Windows Sysinternals - Sysmon

A practical guide to implementation and essential tips.

Read More