Blog

Stay updated with the latest offensive security news, knowledge, and resources.

Latest Resources

Reliable Username Enumeration: A step-by-step guide
Mar 25, 2021 Nicholas Anastasi

Reliable Username Enumeration: A step-by-step guide

Collecting and validating an organization’s employee base is critical for any successful offensive information security operation.
Launching a pentest: How to discover related DNS records
Jan 12, 2021 Nicholas Anastasi

Launching a pentest: How to discover related DNS records

When starting a penetration test, we first try to discover domains associated with our target apex domain. To help you navigate this part of the process, we’re going to detail it, highlighting tips and tricks for working around registrant privacy services and other roadblocks you may face.
How to hunt for SolarWinds Orion usage
Dec 17, 2020 Nicholas Anastasi

How to hunt for SolarWinds Orion usage

Recent reports from FireEye revealed a large-scale campaign to infect company networks using a modified version of the SolarWinds Orion monitoring agent.
1 2 3 4 5 »