AI for Offensive Security: What Works, What Does Not, and How to Adopt It
https://specterops.io/blog/2026/09/24/ai-for-offensive-security/
Altro...AI for Offensive Security: What Works, What Does Not, and How to Adopt It
https://specterops.io/blog/2026/09/24/ai-for-offensive-security/
Process Parameter Poisoning
https://sensepost.com/blog/2026/process-parameter-poisoning/
Mobile device interception with MikroTik
https://sensepost.com/blog/2026/mobile-device-interception-with-mikrotik/
#CyberSecurity #OffensiveSecurity
Altro...Mobile device interception with MikroTik
https://sensepost.com/blog/2026/mobile-device-interception-with-mikrotik/
From flat networks to locked up domains with tiering models
https://sensepost.com/blog/2026/from-flat-networks-to-locked-up-domains-with-tiering-mode
Altro...From flat networks to locked up domains with tiering models
https://sensepost.com/blog/2026/from-flat-networks-to-locked-up-domains-with-tiering-models/
The Effective Red Team
pipetap - a windows named pipe proxy tool
https://sensepost.com/blog/2025/pipetap-a-windows-named-pipe-proxy-tool/
#CyberSecurity #OffensiveSecurity
Altro...pipetap - a windows named pipe proxy tool
https://sensepost.com/blog/2025/pipetap-a-windows-named-pipe-proxy-tool/
Noooooooooo Touch!
A journey implementing Channel Binding on MSSQLClient.py
https://sensepost.com/blog/2025/a-journey-implementing-channel-binding-on-mssqlclient.py/
Altro...A journey implementing Channel Binding on MSSQLClient.py
https://sensepost.com/blog/2025/a-journey-implementing-channel-binding-on-mssqlclient.py/
No Egress, No Shell, No Problem
https://sensepost.com/blog/2025/no-egress-no-shell-no-problem/
Depscanner: Find orphaned packages before the bad guys do
https://sensepost.com/blog/2025/depscanner-find-orphaned-packages-before-the-bad-guys-do/
Altro...Depscanner: Find orphaned packages before the bad guys do
https://sensepost.com/blog/2025/depscanner-find-orphaned-packages-before-the-bad-guys-do/
Investigating an in-the-wild campaign using RCE in CraftCMS
https://sensepost.com/blog/2025/investigating-an-in-the-wild-campaign-using-rce-in-craftc
Altro...Investigating an in-the-wild campaign using RCE in CraftCMS
https://sensepost.com/blog/2025/investigating-an-in-the-wild-campaign-using-rce-in-craftcms/
Is TLS more secure? The WinRMS case.
https://sensepost.com/blog/2025/is-tls-more-secure-the-winrms-case./
Browser Cache Smuggling: the return of the dropper
https://sensepost.com/blog/2025/browser-cache-smuggling-the-return-of-the-dropper/
Altro...Browser Cache Smuggling: the return of the dropper
https://sensepost.com/blog/2025/browser-cache-smuggling-the-return-of-the-dropper/
Leakymetry: Circumventing GLPI Authentication
https://sensepost.com/blog/2025/leakymetry-circumventing-glpi-authentication/
Altro...Leakymetry: Circumventing GLPI Authentication
https://sensepost.com/blog/2025/leakymetry-circumventing-glpi-authentication/
Using & improving frida-trace
https://sensepost.com/blog/2025/using-improving-frida-trace/
NoSQL error-based injection
https://sensepost.com/blog/2025/nosql-error-based-injection/
Getting rid of pre- and post-conditions in NoSQL injections
https://sensepost.com/blog/2025/getting-rid-of-pre-and-post-conditions-in-nosql-injection
Altro...Getting rid of pre- and post-conditions in NoSQL injections
https://sensepost.com/blog/2025/getting-rid-of-pre-and-post-conditions-in-nosql-injections/
Diving Into AD CS: Exploring Some Common Error Messages
https://sensepost.com/blog/2025/diving-into-ad-cs-exploring-some-common-error-messages/
Altro...Diving Into AD CS: Exploring Some Common Error Messages
https://sensepost.com/blog/2025/diving-into-ad-cs-exploring-some-common-error-messages/
PsExec'ing the right way and why zero trust is mandatory
https://sensepost.com/blog/2025/psexecing-the-right-way-and-why-zero-trust-is-mandatory/
Altro...PsExec'ing the right way and why zero trust is mandatory
https://sensepost.com/blog/2025/psexecing-the-right-way-and-why-zero-trust-is-mandatory/
make prs, not war
