Blog

When a user launches Armitage or Cobalt Strike on Windows and presses Start MSF, they’re presented with a curious error. It states: You must connect

Mimikatz is a rapidly evolving post-exploitation toolkit by Benjamin Delpy. I call it a post-exploitation toolkit because it has a lot of features, far beyond

Meterpreter’s getsystem command is taken for granted. Type getsystem and magically Meterpreter elevates you from a local administrator to the SYSTEM user. What’s really happening

Listeners are Cobalt Strike’s abstraction in front of the Metasploit Framework’s payload handlers. A handler is the exploit/multi/handler module. This module sets up a server that

If you’ve ever had to change a module in the Metasploit Framework, you know the go to place is the modules/ directory off of the

<update 03:30pm> I’ve had some feedback that this post describes a concept that is too basic to put into blog form. I can see where this

Sometimes, it’s easy to get code execution in a network, but very difficult to egress out of it. When you are an external actor trying

I have a philosophy. Armitage should make common actions simple and efficient. As soon as you need to break away into an uncommon action, use

The reason I’m in security today is because of the US Air Force’s Advanced Course in Engineering Cyber Security internship program. I turned down an internship at

Cobalt Strike’s Java Applet attacks inject shellcode into memory. Injecting into memory is valuable as it helps get past application whitelisting and can help evade