ZeroSec - Adventures In Information Security (Page 2)

Tunnelling For Offensive Security

Dec 19, 2021 7 min read redteam

One thing that comes up a lot when it comes to red teaming, penetration testing and breaching a network is being able to proxy traffic into multiple environments.

AutoPoC - Validating the Lack of Validation in PoCs

Nov 13, 2021 25 min read honeypoc redteam blueteam bigdata purpleteam Research

HoneyPoC was a project to look at how popular CVE PoCs could be. AutoPoC took that concept and enabled the mass creation of disinformation. Also, Data is beautiful.

LTR102 - Teaser

Sep 23, 2021 7 min read ltr101 ltr102

I started writing LTR102 a while ago but have decided to release a teaser chapter of the new book for free for folks to check out and feedback on. This is the introduction and chapter 1.

ADExplorer Exporting Quick Tip

Sep 10, 2021 1 min read redteam blueteam

Working with ADExplorer as a Red Teamer is really useful for seeing the whole domain in a single snapshot that can be looked at offline. There is minimal tooling out there for parsing

Some of the [Many] Problems with Security Skills

Jul 25, 2021 5 min read

Some of the problems with Security/Infosec/Insert whatever you want to call this industry here and the discussion around skills shortage plus realisation that the expectation vs reality on both sides of the fence needs to be reaffirmed.