What's updog?
March 16, 2020
Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via...
Throwback C2 Thursday
March 5, 2020
This post is going to cover a slightly older C2 framework from Silent Break Security called, ...
Around the Fire With Old Friends (CVE-2019–0604, and CVE-2017-0144)
February 14, 2020
In this post we will cover CVE-2019-0604 (https://nvd.nist.gov/vuln/detail/CVE-2019-0604), albeit a...
Using the RSA NetWitness Platform to Detect C&C: goDoH
January 12, 2020
DNS over HTTPS (DoH) was introduced to increase privacy and help prevent against the manipulation...
APT Emulation Using CALDERA
December 9, 2019
Over the past year, I have posted multiple blogs whereby I perform APT (Advanced Persistent Threat)...
Using RSA NetWitness to Detect Command and Control: PoshC2 v5.0
December 2, 2019
Command and Control platforms are constantly evolving. In one of my previous blog posts, I detailed...
Detecting Lateral Movement in RSA NetWitness: Smbexec
April 17, 2019
Introduction Lateral movement is a technique that enables an adversary to access and control remote...
Detecting Lateral Movement in RSA NetWitness: Winexe
April 10, 2019
Introduction Lateral movement is a technique that enables an adversary to access and control remote...
Detecting Lateral Movement in RSA NetWitness: WMI
April 9, 2019
Introduction Lateral movement is a technique that enables an adversary to access and control remote...
Web Shells and RSA NetWitness Part 3
February 19, 2019
This blog post is a follow on from the following two blog posts: ...