Posts on red-team
53 posts on red-team. Notes from public sources and my own test lab.
What’s Inside the Box? Shedding Light into Darkness with Malware Analysis
A deep dive into why relying on file hashes is no longer enough and how to safely dissect modern threats using static and dynamic analysis techniques.
From Streetlights to Server Rooms: The Mystery of the Letter 'S' in IoT Security
Think that smart sensor is harmless? Think again. From UART shells to hardcoded cloud keys, let's look at how IoT devices become the weakest link in your infrastructure.
When the Foundations Crumble: Software Supply Chain and 'Dependency Hell'
Think you're safe behind your firewall? Think again. The real threat might be that 'npm install' you just ran. Let's dive into the messy world of Software Supply Chain attacks and how they turn your trust against you.
Trusting Your Package Manager? Feeding a Trojan Horse in the Supply Chain
Think your CI/CD pipeline is safe because of a few SCA scans? Think again. We’re diving into the blind spots of package managers, from malicious logic to dependency confusion.
Ghost in the Terminal: Unconventional Penetration Testing Scenarios and Real-World Defense
A deep dive into the Red Teamer mindset: why your security is only as strong as your forgotten legacy server, moving beyond automated tools to explore RCE via misconfigurations, and the art of lateral movement.
Loosening the Prison Bars: Docker Escape and the Art of Defense
A deep dive into why privileged containers are a Red Teamer's dream, how to spot escape routes like the Docker socket, and the right way to harden your containerized infrastructure.
JSON’s Backdoor: The Forgotten 'Logic' and Invisible Threats in API Security
Modern security isn't just about blocking scripts; it's about understanding the logic of your APIs. Let's dive into why WAFs aren't enough when your business logic is broken.
The Silent Killer in the Factory: The Cold Reality of the 'Force Coil' Command in OT Systems
Hacking a server in the IT world leads to data leaks; hacking a system in the OT world leads to physical disasters. Let's dive into the vulnerabilities of Modbus/TCP and why the air-gap myth is dangerous.
The Human Factor: Bypassing the World’s Strongest Firewall with a Cup of Coffee
While we spend millions on security infrastructure, the biggest vulnerability remains the person behind the screen. Let's talk about how social engineering exploits psychology and why it's a Red Teamer's favorite tool.
A Night in the Lab: Why That File Isn’t Behaving Like You’d Expect
Signature-based detection is a thing of the past. Join me in the lab as we dissect how modern malware hides in memory and how we can unmask these 'ghost' scripts using both static and dynamic analysis.
You Can't Patch the Human Factor: The Dirty Lab of Social Engineering
Why most phishing simulations are a waste of time and how real-world social engineering actually works—from the art of OSINT to the psychology of pretexting.
The Illusion of Container Isolation: Owning the Host via docker.sock
Think your containers are securely isolated? Think again. From exposed Docker sockets to unnecessary privileges, let's talk about how misconfigurations turn your secure containers into host-level backdoors.