Using AI to Generate and Execute Offensive Commands

Phishing, Cloud Abuse, and Evasion: Advanced OSINT Investigation

Evading Signature-Based Detection: A Guide to Modifying Sliver C2 Protobuf Messages

New Distributed Password Cracking/Management Solution

Guide pour relayer NTLM sur HTTP - l'exemple de GLPI

Phishing Workflow — Offensive Proof-of-Skill (Controlled Lab)

Ghost in the Cloud: Weaponizing AWS X-Ray for Command & Control

GitHub - Teach2Breach/phantom_persist_rs: Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence

3 Cyber Attacks in June 2025: Remcos, NetSupport RAT, and more

Help me pick the right course.

[Video] Doppelganger – LSASS Dumping via BYOVD + Clone (No EDR Alerts)

Offensive Threat Intelligence

CARTX - Collection of powershell scripts for Azure Red Teaming

OneClik: A ClickOnce-Based APT Campaign Targeting Energy, Oil and Gas Infrastructure

MalDev Myths

Initial Access Attack in Azure - Understanding and Executing the Illicit Consent Grant Attack in 2025

Memory Obfuscation in Rust

Supper is served

Recovering NativeAOT Metadata

EscapeRoute: How we found 2 new vulnerabilities in Anthropic’s Filesystem MCP Server (CVE-2025-53109 & CVE-2025-53110)

DEVMAN Ransomware: Detailed Technical Analysis of New DragonForce Variant

DreamWalkers

DreamWalkers, a reflective shellcode loader with advanced call stack spoofing and .NET support

Technical Analysis of TransferLoader | ThreatLabz

OSEP prep without OSCP

OnionC2 Major Update | New User Interface, Better Security, More Capabilities

Shellcode execution using MessageBox Dialog

Weaponizing LNK Files

Lateral Movement with code execution in the context of active user sessions

Go-EUVD: Zero Dependency Go Library for Interacting with Enisa EU Vulnerability Database (EUVD)

numbreaker - Red Team Operator Conversions Helper Script for Cobalt Strike

Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors

RayInitiator and Line Viper

[Video] Using WSASS to Dump Credentials & How to Detect It – The Weekly Purple Team

Fighting Telecom Cyberattacks: Investigating a Campaign Against UK Companies

Nighthawk 0.4 – Janus | Nighthawk C2

Sliver is my favourite C2. Change my mind

Automating Operations with Nighthawk

BIDI Swap: Unmasking the Art of URL Misleading with Bidirectional Text Tricks

Early Exception Handling

Lazarus Group Attacks in 2025: Overview for SOC Teams

First time posting - OSINT tool feedback request

Velociraptor abused in the wild – Purple Teaming the darker side of IR tools

BadPie: Bake it ‘Til You Fake It

Highly evasive and educational loader

MCP God Mode - Multi-Tool for Authorized Security Assessments and AI Agent Research

The Renaissance of NTLM Relay Attacks

FANCY BEAR GONEPOSTAL – Espionage Tool Provides Backdoor Access to Microsoft Outlook

Wi-Fi Hacking with Kali Linux: Evil Twin Attack Tutorial (Ethical Hacking for Beginners)

PoolParty Injections, BOF implementation