segalee·Oct 26【藍隊筆記】Cobalt Strike 分析筆記(下)前言： 本篇是 Cobalt Strike 系列的最後一篇，經過上篇了解了 Cobalt Strike 的基本架構與 Beacon 的運作，到中篇的調查分析，接下來本篇將會介紹最後尚未說明但卻也是攻擊鏈中必要的一環，就是 Beacon 的提權與後續 PtH…
Mayank Sahu·Aug 20From an SSRF to “Oh no, I own your whole cloud” — How I Built CloudMeta BOFA few years back, on a pentest engagement, I stumbled into one of those moments every pentester lives for. You know the one — where a…
Jay Tiwari·May 28ARTOC Course ReviewWho Am I & Why My Opinion MattersA response icon2A response icon2
UdayVeer·May 26ARTOC Course ReviewSo i’ve been meaning to write this for a while now and i’m finally sitting down to do it. This is my review of the ARTOC course by White…
InInfoSec Write-upsbywhoami·Apr 16[13Cubed] Chaos at Cobalt Challenge — Investigating Windows Endpoints[13 Cubed] Linux & Windows Compromised Case
Tech Security·Feb 7The Ghost in the Editor: 5 Surprising Truths Behind the Notepad++ Supply Chain HijackFor millions of developers and IT professionals, Notepad++ is more than just a text editor — it’s a daily companion, a trusted constant in…
Pablo Rodriguez Sanz·Jan 30Let’s Defend SOC338 — Lumma Stealer — DLL Side-Loading via ClickFix PhishingThe Scenario
