C2 agent factory: notes on LLM-generated offensive tooling
From a failed prompt to a working implant in 3 hours
Articles
bind_tcp_agent: a Mythic P2P bridge for TCP-based C2
How to connect Mythic with remote agents through an outbound TCP connection
Detecting Certighost attack
A user with minimal privileges can gain control over the domain
Active Directory Trust Relationship Attacks
Our lab environment examples show how to get info about domains and elevate privileges
Teaching IDA Pro to understand the RISC-V P Extension
How we make IDA Pro decode, interpret, and lift previously unsupported CPU instructions
Role-playing games: when SCCM turns into C2
Catching exploitation of a vulnerability that antiviruses don’t see
Pentesting by AI: Local LLMs Benchmark
Comparative analysis of multiple LLMs in their ability to uncover vulnerabilities
Attacks via OpenClaw: when your LLM can make RCE
Following a special link, the AI agent itself will execute shell commands
History of Critical Incidents
How critical incidents of different types were distributed across industries in 2020-2025
Human factor in cyber defense: when the enemy is our own mindset
The most common biases that occur in SOC and how to avoid them
Attacking Security Researchers via Visual Studio
A new technique to exploit VS IDE using SUO files