BLOG

A while back, I was working on some offline HTML files using Microsoft’s Office Word for some side project. I simply created an empty...

What is Security Red-Team? A security red-team is a test that aims to assess the security level of an organization, identify main weaknesses

Bypassing CrowdStrike in an enterprise production network EDR solutions and specifically CrowdStrike Falcon are giving us a hard time...

How a failing red-team engagement led us to find a silly zero day. And why “insecure by default” is still an issue in 2019.

In a simple penetration test the tester is presented with a target, say a web application, and attacks it from his workstation. However,...

Back when I started doing red team engagements for Komodo, bypassing AV solutions was quick and trivial, almost a ‘non-brainer.’ Just...