Embrace The Red

Over the last few years eBPF has gained a lot of traction in the Linux community and beyond. eBPF’s offensive usage is also slowly getting more attention.

In this 25 minute video I’m explaining the foundations of Web Application Security.

On Unix/Linux users with a uid=0 are root.

This post is part of the machine learning attack series.

I like using procdump on Windows.

In this very short post I wanna talk mention The Silver Searcher, which I just learned about a few weeks ago.

Many Windows applications and services are implemented using an automation infrastructure called Component Object Model (COM).

Until the Apple Airtag came out a few months ago I hadn’t really looked into the tag tracking market.

This rather lengthy post goes into reasons for having an offensive security program and in particular, on how a red team can help improve the immune system of your organization.

Recently Google’s FLoC proposal has been making the rounds in the news.

A nifty way for adversaries to acquire passwords during post-exploitation is to spoof credential dialogs and perform a local phishing attack.

You probably heard of NFTs (non-fungible tokens).

Next week (on March, 9th 2021) I will be speaking at the Hong Kong Information Security Summit 2021.

The other day I read this blog post about “The Death of Manual Red Teams” and I thought I’d take a moment to comment on it to provide an alternative perspective.

The Kindle (ebook) edition of “Cybersecurity Attacks - Red Team Strategies” is currently free on Amazon.

The other day Microsoft published a great deep dive around the second stage payloads and hands-on hacking activities of the Solarwinds/Sunburst incidents that where uncovered late 2020.

Survivorship bias is an interesting thing that we can observe nearly daily.

Security metrics are an interesting topic.

Today FireEye shared that they were victim of a cyberattack and internal red teaming tooling was accessed by adversaries.

What a journey it has been.

In this post we will explore Generative Adversarial Networks (GANs) to create fake husky images.

There are plenty of examples of artificial intelligence and machine learning systems that made it into the news because of biased predictions and failures.

You might have heard about “NAT Slipstreaming” by Samy Kamkar.

This post is part of a series about machine learning and artificial intelligence.

My GrayHat Red Team Village talk “Learning by doing: Building and breaking a machine learning system” is now live on YouTube.

This post is part of a series about machine learning and artificial intelligence.

A few years back the Blue Team of a company asked to be targeted in a Red Team Operation.

This post is part of a series about machine learning and artificial intelligence.

For GrayHat 2020 I was asked to create a short intro video for my Red Team Village talk “Learning by doing: Building and breaking a machine learning system”.

There is a lot of discussion around terms such as red team, attack team, pentest, adversarial engineering or offensive security team and similar ones.

While building “Husky AI” I started working a lot with Microsoft’s VS Code Python extension.

This post is part of a series about machine learning and artificial intelligence.

Excited to announce that I will be presenting at Grayhat - Red Team Village on October 31st 2020.

This was also presented at BSides Singapore 2020.

This year one of my goals was to learn about machine learning and artificial intelligence.

This post is part of a series about machine learning and artificial intelligence.

This post is part of a series about machine learning and artificial intelligence.

This post is part of a series about machine learning and artificial intelligence.

This post is part of a series about machine learning and artificial intelligence.

This post is part of a series about machine learning and artificial intelligence.

This post is part of a series about machine learning and artificial intelligence.

This post is part of a series about machine learning and artificial intelligence.

This post is part of a series about machine learning and artificial intelligence.

This year I have spent a lot of time studying machine learning and artificial intelligence.

Excited to announce that I will be presenting at BSides Singapore this year.

Today I’m gonna talk about a class of application security issues I ran across a few times over the years.

These days business decisions and feature development often is influenced heavily by telemetry information.

Throughout my career I have been fascinated with quality assurance and testing, especially security testing and red teaming.

In this post I will discuss some testing techniques for internal red teams to identify privacy issues in services and infrastructure, most importantly a simple three step approach that might uncover interesting results.

Finally I got to writing some basic tooling for invoking the Firefox debugging API to send commands to the browser and read the responses.