Formerly worked in a non security IT role for 15 years where I then undertook a career change into Cyber Security.
Currently working in an Adversary Simulation role and busily studying all things Red Teaming.
This Blog will highlight my experiences following my career change.
Playing around with Cloudflare's tunnelling capabilites as well as checking out how it could be used for C2 infrastructure
Check it outHere is some detailed information on my time spent building shellcode runners in the Nim programming language.
Check it outAdding a new Sliver BOF into the Sliver Armory and my experiences working with the Sliver C2 Framework
Check it outA nice little LPE trick to easily get RBCD access on a compromised machine running webdav.
Check it outA simple Cobalt Strike aggressor script I developed to email me when a beacon checks in.
Check it outI recently had to figure out what type of creds and infrastructure I required for an Azure Pentest. Here are my thoughts on Azure scoping.
Check it outSome thoughts on my little foray into the world of CrackMapExec Python development.
Check it outI passed this excellent course in April 2023. If you like the idea of using Cobalt Strike have a read.
Check it outHere is the story of my first internal pentest where I got DA abusing ESC8.
Check it outMy review of the Sektor7 Malware Development Essentials Course.
Check it outMy review of the CRTP labs and exam. I took this exam in November 2022 and it was a fantastic experience using only Windows to attack Windows
Check it outMy review of the OSCP labs and exam. I took this exam in late September 2022.
Check it out