Cypher injection into Neo4j exposes passwords
Vulnerability in Cypher query construction gives attackers broad capabilities
RedTeam
Using LLM to build Mythic C2 agents
How we accelerated the development of pentesting tools
C2 agent factory: notes on LLM-generated offensive tooling
From a failed prompt to a working implant in 3 hours
bind_tcp_agent: сonnecting Mythic to remote agents via TCP
Unlike traditional C2 agents, this virtual callback generates no binary payload
bind_tcp_agent: a Mythic P2P bridge for TCP-based C2
How to connect Mythic with remote agents through an outbound TCP connection
Turning a TURN server into an evil proxy
A video conferencing relay host can redirect traffic to C2
Privilege escalation through trusts in AD
Trust relationships between domains facilitate various attacks
Active Directory Trust Relationship Attacks
Our lab environment examples show how to get info about domains and elevate privileges
Extracting secrets from Octopus Deploy
Attackers can get valuable data even if they don’t have access to the web version of the tool
NTLM Reflection attack: when it works
Under what conditions can a non-domain Windows host be compromised
Extending IDA Pro: а guide for reverse engineers
What if your decompiler doesn’t support some RISC-V instructions
Teaching IDA Pro to understand the RISC-V P Extension
How we make IDA Pro decode, interpret, and lift previously unsupported CPU instructions
From RCE on a controller to domain admin
An interesting experience in solving a pentesting task
Accessing Bitbucket through a test K8s cluster
Kubernetes API can reveal many secrets without authentication
LLM for pentesting: speed isn't everything
We found out which local LLMs are better at finding vulnerabilities
Pentesting by AI: Local LLMs Benchmark
Comparative analysis of multiple LLMs in their ability to uncover vulnerabilities
PhantomRPC: A new method for privilege escalation
Fake RPC server can impersonate the security context of the calling client, up to SYSTEM
How to make OpenClaw execute malicious commands
We found a vulnerabilty in a popular LLM agent
Attacks via OpenClaw: when your LLM can make RCE
Following a special link, the AI agent itself will execute shell commands
Bruteforcing WPA 802.11r: a new module for HashCat
Previously, pentesting tools did not work with 802.11r hashes