~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
231 articles
msfvenom malicious DLL DLL injection on Metasploit is a technique which allows an attacker to run arbitrary code in in the memory of another process. If this process is running with escalated privileges then it could be abused by an attacker in order to execute malicious code in the form of a DLL fi
Shellter is a shellcode injector and can be found at:www.shellterproject.com I have been using the tool to demonstrate to customers how simple it is to bypass antivirus (AV) detection using programs that would have otherwise been detected as suspicious or possible threats within typical AV analysis
A few weeks ago, I wrote about TheFatRat remote post exploit tool. The blog was primarily a guide to installing it and performing some basic functions.This article will go a little deeper. We’re going to explore the entire attack life cycle… how a victim may potentially be infected and what an attac
Most networks, no matter how highly secured, have vulnerabilities that can be exploited by attackers. This article will explore the DNS protocol and tunneling. It is common to see the DNS protocol used to establish outbound sessions from a restricted network, then tunnel other protocols through the
Steganography is the practice of concealing a file, message, image, or video within another file, message, image, or video. The word steganography combines the Greek words steganos, meaning ‘covered, concealed, or protected’, and graphein, meaning ‘writing’. The first recorded use of the term was in
msfvenom malicious DLL DLL injection on Metasploit is a technique which allows an attacker to run arbitrary code in in the memory of another process. If this process is running with escalated privileges then it could be abused by an attacker in order to execute malicious code in the form of a DLL fi
GitHub is a great source of software. It is based on a library or version control system, providing developers an outlet for open source software and related updates. I recently took a look at Dracnmap, which can be found at: https://github.com/Screetsec/Dracnmap Dracnmap is an open source program p
Introducing MorpheusMorpheus is a new tool that provides you with the ability to simulate automated Man-in-the-Middle attacks. Morpheus can be found at https://github.com/r00t-3xp10it/morpheus.The Morpheus application consists of a suite allowing users to manipulate TCP and UDP data packets using a
The Web as an Iceberg The Deep Web, DarkNet, The Hidden Net, The Invisible Net: It has many different names.Many experts believe that approximately 30% of the Internet is indexed by searched engines such as Google. If this is true then we can infer that 70% of the content available online is not sea
There are several ways to either assess your current hacking skills or increase your prowess. Capture the Flag (CTF) programs are a way of gamifying cybersecurity skills within a fun, interactive, and challenging delivery platform. One of my favorite free, public cybersecurity sites is Hack The Box:
There's been a growing trend in the world of cybercrime recently; that of sim-swapping, a new and subversive type of identity theft. Pro League of Legends gamer and multiple time NA LCS champion Yiliang 'Doublelift' Peng recently took to Youtube to describe his own experience of the process."Your Ac
Docker is a great way of running an isolated environment for testing. A few people have been asking me is it possible to run Kali Linux in Docker. Kali is a great use case for Docker under the right circumstances. In all honesty, I have not used it often, but in general, I find Docker is well suite