Certified AI/ML Pentester Review
As organizations race to adopt the latest in artificial intelligence (AI), I was looking for training that addressed its unique attack surface and tested my skills in exploiting large language mode...
Default
Active Directory ACL Abuse with Kali Linux
Active Directory Access Control Lists (ACL), and their associated Access Control Entries (ACE), define the entities and permissions of a specific AD object. If misconfigured, abusing these permissi...
Game Hacking: Hex Editing Save Files for Unlimited Cash
After creating a Batocera live USB for retro gaming, I instantly started down the path of game hacking and researching how ROM’s (digital game copies) could be abused… This post serves as my intro...
Decoding the Airwaves: Tracking Device Movements With WiFi
One of the many rabbit holes Ive gone down recently was the use of WiFi to track client devices. While this technique is not new by any means, I recall seeing matt0177s 2022 Blackhat USA talk where...
Portable Python for In-Memory Execution & Modern Evasion
Forget compiling payloads and operating on disk — this post demonstrates the use of Python’s portable interpreter for in-memory malware deployment, even when the language isnt installed on the host...
Pythonic Malware Part-2: Reversing Python Executables
Post Updates 09/2023: Starting in PyInstaller 6, bytecode encryption and the --key argument have been depreciated. Overview In Pythonic Malware Part-1, I demonstrated how Python executables ...