assume-breach – Medium

Sep 1

Home Grown Red Team: The Offensive Clipboard Revisited

This isn’t going to be a long post, but I think it’s a really cool concept that I have wanted to implement for a while. This isn’t a new idea. I have seen a few builds over the years, the most famous being WeHackPeople’s from their 18 second YouTube video. …

4 min read

Home Grown Red Team: The Offensive Clipboard Revisited

4 min read

Aug 29

Home Grown Red Team: Hak5 Gear In 2023 With Microsoft Defender For Endpoint

Welcome back! Today we’ll take a look at some of the tools out there by Hak5. If you’re not familiar with Hak5, they are a company that sells hackery stuff like network implants, HID injection tools and Wifi pentesting hardware. Today we’ll take a look at 3 tools offered…

Hacking

9 min read

Home Grown Red Team: Hak5 Gear In 2023 With Microsoft Defender For Endpoint

Hacking

9 min read

Aug 16

Home Grown Red Team: SMB Pivots With Havoc C2

Welcome back! Today we’re going to talk about some lateral movement techniques with Havoc C2 using SMB pivots. SMB pivots are great for moving around in a network where specific targets don’t have Internet access. But moving across IP ranges can be tricky. Here’s what our lab is looking like:

Penetration Testing

8 min read

Home Grown Red Team: SMB Pivots With Havoc C2

Penetration Testing

8 min read

Feb 7

Home Grown Red Team: Let’s Make Some OneNote Phishing Attachments

In my previous blog post I showed how we can use LNK files to launch initial access payloads. In the weeks since, Microsoft has seemed to take action against this method. With new updates this method is no longer working on my end with Microsoft Defender For Endpoint. However, it…

Malware

8 min read

Home Grown Red Team: Let’s Make Some OneNote Phishing Attachments

Malware

8 min read

Jan 20

Home Grown Red Team: Bypassing Applocker, UAC, and Getting Administrative Persistence

Welcome back! In my previous post, I showed how we can bypass default Applocker rules using LNK files to get a Havoc beacon. In this installment, we’re going to bypass UAC and gain administrative persistence on a target without dropping EXEs to disk. Pretty cool, right? Getting Started If you…

Malware

5 min read

Home Grown Red Team: Bypassing Applocker, UAC and Getting Administrative Persistence

Malware

5 min read

Jan 18

Home Grown Red Team: Using LNK Files To Bypass Applocker

The Windows LNK file is just one of the many ways to get easy execution while bypassing Applocker and some AV. While this isn’t a new concept, it does present a lot of opportunity and is still favorite method of initial access for APTs around the world. In this post…

Malware

7 min read

Home Grown Red Team: Using LNK Files To Bypass Applocker

Malware

7 min read

Jan 12

Home Grown Red Team: Installing NetHunter On A Nexus 5 (Like It’s 2013).

I already know what you’re thinking. What year is it? It’s 2023 and the price of a Raspberry Pi is $150 for a top tier model. A Raspberry Pi Zero W 2 is $80. Even the Raspberry Pi 3Bs are expensive. We’re all very sad about it, but… I bought…

Hacking

9 min read

Home Grown Red Team: Installing NetHunter On A Nexus 5 (Like It’s 2013).

Hacking

9 min read

Dec 20, 2022

Home Grown Red Team: Let’s Make Some Malware In C: Part 3

Welcome to part 3 of our series! That last one was crazy long. This one is going to be pretty short because we’re not really going to introduce any new concepts or encryption or fancy stuff like that. This post is going to be all about the dll! A dll…

Malware

4 min read

Malware

4 min read

Dec 16, 2022

Home Grown Red Team: Let’s Make Some Malware In C: Part 2

As promised during part 1 of this series, we have reached part 2! If you haven’t read my first post, you can find it here. …

Malware

10 min read

Malware

10 min read

Dec 9, 2022

Home Grown Red Team: Let’s Make Some Malware In C: Part 1

Welcome back! In this installment of Home Grown Red Team, we’re going to make some malware. Most of these techniques are we are going to go over were learned from the Sektor 7 Malware Essentials Course. I can’t recommend that course enough! …

Malware

12 min read

Malware

12 min read