Posts on red-teaming
43 posts on red-teaming. Notes from public sources and my own test lab.
A Stowaway on the Container Ship: Hidden Dangers Behind Images and Safe Harbors
We used to brag about uptime records; now we get suspicious if a container lives longer than five minutes. Let's dive into why 'it’s dockerized' doesn't mean 'it's secure' and how to stop hidden threats in your image layers.
The Silent Cry of Parameters: Hunting Logic and Architecture in Modern Web Apps
When you multiply the 'amount' parameter in a checkout request by -1 and the server returns a 200 OK, your entire security architecture just became a paper tiger. Let's dive into why logic and architecture hunting is the real frontier of modern security.
Breaking the Factory Default: Why ‘Modern’ Security Solutions are Crashing OT Networks
Everyone is talking about IT/OT convergence, but shoving office-grade scanners into a factory network is a recipe for disaster. Here’s why your legacy PLCs hate your 'next-gen' security tools.
The Silent Packet Before the Valves Close: Red Teaming Industrial Systems and the Invisible Threats
In the OT world, a single unauthenticated Modbus packet can be more devastating than a Domain Admin takeover. Let's dive into why industrial systems are still living in the security dark ages and how we can protect them.
Görünmez Duvarları Aşmak: PDF Generator'dan Cloud Metadata'ya Uzanan O Tehlikeli Yol
Bir PDF oluşturma servisinin nasıl bir iç ağ casusuna dönüştüğünü ve bulut ortamındaki en değerli anahtarların nasıl tehlikeye girdiğini teknik bir kriz anıyla inceliyoruz.
When the Valves Start Turning Themselves: The 'Air-Gap' Fairytale and Harsh Realities in Industrial Systems
Think your industrial network is truly isolated? Let's talk about the 'Air-Gap' myth, why Modbus is dangerously polite, and the cold reality of OT security from a Red Teamer's perspective.
Not Vanilla Ice Cream, but Industrial Disaster: The Air-Gap Lie and the Defenseless World of PLCs
Think your industrial systems are safe just because they aren't on the internet? Think again. Let’s talk about the reality of OT security and how a simple Python script can wreak havoc on an unprotected PLC.
The Black Widow in the Box: Is a 'Sandbox' Enough for Malware Analysis?
Is a clean VirusTotal report enough? Join me as we dissect malware through static and dynamic analysis, and see why today's threats are smarter than your average sandbox.
The Orchestrator or an Insider Trojan? Invisible Dangers in the Kubernetes World
Security has shifted from physical firewalls to the orchestration layer. Let's dive into the dark corners of Kubernetes security—from API Server leaks to RBAC misconfigurations—and talk about how to keep the cluster safe.
From Docker Socket to Root Shell: Is Container Isolation an Illusion?
A deep dive into how misconfigured Docker containers, privileged flags, and exposed sockets turn your 'secure' environment into a playground for Red Teamers.
Handing Over Your K8s Cluster on a Silver Platter: Config Errors and Cold Hard Truths
Ever wondered how a single YAML line can turn your infrastructure into a public playground? Let's dive into common Kubernetes misconfigurations from a Red Team perspective and look at how to actually secure them.
Opening the Black Box: Anatomy of Malware and Those Critical Decisions in the Analysis Lab
It's 3:15 AM, a high-severity alert pops up, and you're staring at a file named invoice_9928.pdf.exe. Join me as I walk through a digital autopsy of a 'Fully Undetectable' threat in a controlled sandbox environment.