Unpacking a laZzzy Donut 2026-09-17 65 True waf-fu, or Some Log Replay Nonsense 2026-09-01 55 True AI Offense is Not Noclip Mode 2026-08-13 80 True device, code, phishing, attacks, hotness, m365 2026-07-21 70 True Pandora’s Container Part 1: Unpacking Azure Container Security 2026-07-14 75 True Vulnify: Giving Your Agents a CVE Brain 2026-07-09 70 True JS-Tap v3: Endpoint Post-Exploitation With JavaScript Implants 2026-06-25 78 True The Privileged Roles Nobody Talks About 2026-06-04 75 True Shai-Hulud Is Back, and This Time It Ate the Whole Ecosystem 2026-05-21 92 True Slamming the Door on Quick Assist Tech Support Scams and Abuse 2026-05-12 60 True ARP Around and Find Out: Hijacking GPO UNC Paths for… 2026-04-30 70 True Benchmarking Self-Hosted LLMs for Offensive Security 2026-04-14 15 True IAM the Captain Now – Hijacking Azure Identity Access 2026-04-09 75 True Building a Detection Foundation: Part 5 - Correlation in Practice 2026-04-07 50 True Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found 2026-03-19 78 True LnkMeMaybe - A Review of CVE-2026-25185 2026-03-13 70 True Building a Detection Foundation: Part 1 - The Single-Source Problem 2026-03-06 70 True Notepad++ Plugins: Plug and Payload 2026-02-19 70 True Keys to JWT Assessments - From a Cheat Sheet to a Deep Dive 2026-02-05 60 True LDAP Channel Binding and LDAP Signing 2026-01-29 50 True Adventures in Primary Group Behavior, Reporting, and Exploitation 2026-01-22 70 True Abusing Windows Built-in VPN Providers 2025-12-16 60 True CORS Findings: Another Way to Comprehend 2025-12-15 60 True Hack-cessibility: When DLL Hijacks Meet Windows Helpers 2025-11-25 55 True Detecting Active Directory Password-Spraying with a Honeypot Account 2025-10-17 45 True Skimming Credentials with Azure's Front Door WAF 2025-10-14 65 True Hiding in the Shadows: Covert Tunnels via QEMU Virtualization 2025-10-02 55 True Dragging Secrets Out of Chrome: NTLM Hash Leaks via File URLs 2025-09-25 50 True WSUS Is SUS: NTLM Relay Attacks in Plain Sight 2025-09-19 70 True Red Alert: Massive cyber wire fraud attacks on US Companies 2025-08-07 70 True The Backup Paradigm Shift: Moving Toward Attack Response Systems 2025-08-06 70 True Attacks on the Rise Through Office 365 2025-08-06 60 True An 'Attack Path' Mapping Approach to CVEs 2021-42287 and 2021-42278 2025-08-04 75 True Let's Clone a Cloner - Part 3: Putting It All Together 2025-07-31 40 True Azure's Front Door WAF WTF: IP Restriction Bypass 2025-07-10 55 True CVE-2025-1729 - Privilege Escalation Using TPQMAssistant.exe 2025-07-08 60 True Full Disclosure, GraphGhost: Are You Afraid of Failed Logins? 2025-07-03 55 True Abusing Chrome Remote Desktop on Red Team Operations: A… 2025-07-01 50 True Achieving Passive User Enumeration with OneDrive 2025-06-30 30 True OneDrive to Enum Them All 2025-06-30 45 True Bypassing Virtualization and Sandbox Technologies 2025-06-20 55 True Attacking JWT using X509 Certificates 2025-06-17 55 True Hunting Deserialization Vulnerabilities With Claude 2025-06-12 55 True Red Team Gold: Extracting Credentials from MDT Shares 2025-05-20 70 True Office 365 - Advanced Threat Protection (ATP): Features and Shortfalls 2025-04-25 35 True Discovering the Anti-Virus Signature and Bypassing It 2025-04-25 65 True Threat Hunting - Outbound RDP Surprises 2025-04-25 55 True Malicious Macros for Script Kiddies 2025-04-25 70 True Critical Guidance on the CVE 2022-22965 (Spring4Shell) Vulnerability 2025-04-25 75 True CVE-2022-24696 - Glance by Mirametrix Privilege Escalation 2025-04-25 65 True 
