Red Teaming with a Blue Team Mentality

Using macOS Internals for Post Exploitation

In terms of post exploitation for macOS, python has been the primary language used up to this point. I can totally see several reasons why: lots of public support and libraries available, ease of use, python 2 being on all macOS endpoints natively, etc…

Basic Recon Starting With A Domain Name

Let’s say all you have is a company name (presumably the…

Loading Python Runtimes in Swift

In this blog post I will walk through using a neat Swift package that imports local python libraries…

MacShell Post Exploitation Tool

This is a follow-up to the post I previously wrote about the process I went through to write my own…

Making Objective C Calls From Python Standard Libraries (Red Team Edition)

Jenkins Hunter Script

As a current red teamer (and a former blue teamer), I have seen unauthenticated Jenkins abused in various environments. These instances of unauthenticated Jenkins provide initial access points which often lead to additional access. It is not uncommon to find unauthenticated Jenkins…

Creating A Simple C2 Server Using aiohttp

This is a writeup on how you can use the aiohttp python library to create a basic web…

Purple Team Candidates for Modern Tech Environments

A Brief Look At Approaches To Red Team Operations