Offensive Security

MITRE ATT&CK and the ATT&CK Matrix

Tools Offensive Security APT Detection

Kali Linux and Parrot Sec OS, Penetration Environment Comparison

Offensive Security Pentesting

New ways to run Kali Linux on Windows using WSL

Pentesting Offensive Security Linux Virtualization

Running and Imaging with FTK Imager from a flash device

Forensics Offensive Security

Change the MAC address of your Linux system

Offensive Security Sysadmin

Email (in)security

Offensive Security

Setting up a watering hole attack with metasploit

Offensive Security Pentesting

In recent years we have witnessed multiple organised attacks against countries and companies using malicious code that was distributed via a legitimate website. These types of attacks are called “watering hole attacks” as they target well known and used websites and compromising them. You could compare this to dumping poison or other dangerous chemicals in a pond or well, where your intentions are to target any and all that use that source. One o...

Simulate user activity with the GHOSTS framework: Client set-up and Timelines

Offensive Security

In part I of our look into the GHOSTS framework, we managed to set up the GHOSTS servers on our computer and connect a simple Windows VM, running the client code, to the GHOSTS API server. The next step is to configure properly our Windows Client to simulate the activity of a real user. To do that we will set up multiple programs and tools that can be run automatically and define their behaviour.

Simulate user activity with the GHOSTS framework : Introduction

Offensive Security

Man-In-The-Middle (MITM) with arpspoof

Offensive Security

Mobile Device Security Training

Training Stay Home Offensive Security Mobile Device Security

On Wednesday 15 April 2020, we are organizing a special training session dedicated to Mobile Devices Security.

Stealthy website scanning thanks to archive.org

Offensive Security