Red team

xbz0n@sh:~# Blogxbz0n.sh

Evading detection in memory - Pt 1: Sleep Obfuscation - FoliageOblivion

Kharon/Payload_Type/kharon at main · MythicAgents/KharonGitHub

Checking for Symantec Account Connectivity Credentials (ACCs) with PrivescCheckitm4n’s blog

Part 1: Creating Mythic C2 Agentc0rnbread blog

ArgFuscatorArgFuscator

DLL hijacking with exported functions. Example: Microsoft Teamscocomelonc

Technical Case Study: The Tale of Privilege Escalation vs the Unstartable ServiceMedium

GitHub - jfmaes/Invoke-DLLClone: Koppeling x Metatwin x LazySignGitHub

Revisiting COM Hijacking - SpecterOpsSpecterOps

GitHub - rtecCyberSec/BitlockMove: Lateral Movement via Bitlocker DCOM interfaces & COM HijackingGitHub

Obfuscating a Mimikatz Downloader to Evade Defender (2024)Medium

FlangvikYouTube

c0rnbread blogc0rnbread blog

Transforming Red Team Ops with Mythic’s Hidden Gems: Browser Scripting - SpecterOpsSpecterOps

LOLAD and AD Exploitationlolad-project.github.io

Lateral Movement: Abuse the Power of DCOM Excel ApplicationMedium

Insights - MDSecMDSec

Domain Fronting is Dead. Long Live Domain Fronting!Praetorian

Domain Takeover via Kerberos Unconstrained DelegationCheckmate

Unconstrained Delegation in Active DirectoryPraetorian

Resource Based Constrained Delegationwww.r-tec.net