Blog

Enhancing AtlasReaper

For red teamers, adaptability is everything. The ability to pivot…
15/01/2025/by Aldo Mihasi

Enhancing ScheduleRunner

In the arsenal of a red team operator, adaptability and stealth…
18/12/2024/by Aldo Mihasi

A Native Application Subsystem Backdoor

What is a Native Application?
Most Windows applications come…
03/12/2024/by Nick Aliferopoulos
Red Teaming

Red Teaming and Industry Pitfalls

Cybersecurity isn’t one-size-fits-all, and neither is security testing. Organizations face different threat landscapes, risk appetites, regulatory pressures and levels of security maturity, yet exercises like red teaming, penetration testing, assume breach, social engineering and tabletop exercises are often grouped together or misunderstood as equivalent. In reality, each of these approaches is designed to validate different […]

SQL-Hacking

Microsoft SQL Server Hacking — TDS Downgrade Attack

Hey there, fellow hackers!  As we kick off this new year, it's the perfect time to dive into some research. That’s why we wanted to share an intriguing observation from a deep dive into Microsoft SQL Server hacking via its TDS protocol, conducted by our team member NeCro aka Giannis Christodoulakos. While exploring how SQL […]

XWizard

XWizard: From XML to ShellExec Using Wizardry

Intro Red Teaming in the day and age of EDRs often involves finding niche and obscure ways, to perform actions usually under specific constraints, or as we call them internally, bypass primitives. While hunting for such primitives, an interesting small ecosystem became the center of attention for further research, that of XWizard. It should be […]