Poking Around With 2 lsass Protection Options

Welcome to my first post! I am a career blue teamer turned red teamer a few…

Creating A Simple C2 Server Using aiohttp

This is a writeup on how you can use the aiohttp python library to create a basic web…

Using macOS Internals for Post Exploitation

In terms of post exploitation for macOS, python has been the primary language used up to this point. I can totally see several reasons why: lots of public support and libraries available, ease of use, python 2 being on all macOS endpoints natively, etc…

Taking The macOS Endpoint Security Framework For A Quick Spin

Basic Recon Starting With A Domain Name

Let’s say all you have is a company name (presumably the…

A Brief Look At macOS Detections and Post Infection Analysis

Helpful Red Team Operation Metrics

Measuring progress and metrics across red team operations can be done in several different ways. In…

My Journey Writing A Post Exploitation Tool for macOS

Sharing my journey and lessons learned in this…

Launching Apfell Programmatically

This blog post serves as a quick reference on how to launch Cody Thomas’s Apfell on a macOS device…

Infra Automation Primer (Red Team Edition)

In modern times, the areas of responsibility for internal…