How to use Home Assistant / NodeRed to set up Holiday Lights to fake your presence.
So you have a smart home, you have all the lights set up and running as you like but you...
Premium Members Content
Maldocs Are Evolving
Unless you have been living under an infosec rock the past couple of weeks, you probably heard about the Follina...
Try Hack Me: Pickle Rick
We start by running nmap nmap -v -sC -sV IP-ADDRESS-HERE -oA pickle-rick-scan When this is completed you will notice port...
Try Hack Me: Wonderland
We start off by running Nmap against the server nmap -v -sC -sV 10.10.131.182 -oA wonderland-10.10.131.182 Nmap scan of the...
Empire 4.5
It has been another exciting week for the team. First we are just a week away for our inaugural course...
Empire 4.4
It has been a while since we have been able to discuss the new features in Empire. We wanted to...
Weaponizing WebDAV for Offensive Security
Today, we will talk about combining two fascinating Tactics, Techniques, and Procedures (TTPs) together for deploying Command and Control (C2):...
Rebuilding IronNetInjector – Turla’s IronPython Toolkit
During a recent engagement, we were asked to employ Turla’s Tactics, Techniques, and Procedures (TTPs) using IronNetInjector. This is not...
Empire 4.2
Empire 4.2 was just finalized over the weekend and we are excited to share some of the new features. This...
Hacktoberfest 2021
It’s that time of year again! This means it’s the season for Halloween, Oktoberfest, and HACKTOBERFEST! So what is Hacktoberfest?...
Hooks, Filters, and Other Really, Really, Cool Things
In case you don’t check our commit history on our GitHub on a daily basis, Empire 4.1 and Starkiller 1.9 were released to...
Community Contributors Program
Now that Defcon and Blackhat are checked off for the year, we can get back to real work the fun...
How to use n8n to automatically scrape Victims from Ransomware dark web onion blogs via TOR proxy
Step one, get n8n up and running. Step two, have a spare device to install tor on and use as...
How to create a Wireguard QR Code
If you have seen my previous tutorials, where I have created a PfSense Wireguard tutorial this will compliment that. You...
Setting up Telegram Notifications on Synology DSM 7.X
If you are like me and use Telegram for everything, personal or work then I bet you’d want to have...
Step by step guide on Setting up NordLynx Wireguard VPN in PfSense
IF you already use NordVPN, you will be well aware that they refuse to give out the WireGuard config information...
Using MITRE D3FEND Framework (0.9.3-BETA-1)
The MITRE Corporation, one of the most respected organizations in the cybersecurity field, has released D3FEND, a complementary framework to...
XLS Entanglement
VBA tradecraft is constantly evolving and this past winter, I came across some articles from Adepts of 0xCC. Specifically, their...
Vcenter Server CVE-2021-21985 – RCE PAYLOAD – POC
Note: Vsphere UI is Tomcat middleware by default, so arbitrary code can be executed in the manner of Tomcat RMI...
Hack The Box Walkthrough Guide To: BREACH
Disclaimer: I do NOT want you to read this if you have not even tried to attempt any of it...
Overview of Empire 4.0 and C#
The release of Empire 4.0 is just around the corner and we wanted to take some time to walkthrough some...
Empire Dropbox C2 Listener
One of the lesser-known features in Empire is the ability to use alternative Command and Control (C2) methods. Specifically, we...
Hack the box guide to: Phonebook
Phonebook - 30 points So at always lets fire up burp and visit the page to see what is there...
Hack the Box Guide To: Templated
We start with a page showing "Site still under construction" landing page We can try adding something like /index.html and...
