TCH AI SE sender ghostsurf: From NTLM Relay to Browser Session Hijacking TL;DR: ntlmrelayx's SOCKS proxy works great for SMB and MSSQL but fails when you try to browse a web application through it - I dug into…
SPT TCH AI SE sender Weaponizing Whitelists: An Azure Blob Storage Mythic C2 Profile TL;DR: Mature enterprises lock down egress but often carve out broad exceptions for trusted cloud services. This post shows how reviewing…
