#red-teaming

CARTE Exam Review: Altered Security’s Azure Red Team Expert Certification⚔️🎯

Today I want to share my experience with the CARTE exam. Without a doubt, it was an exam that took me some time to finally feel ready to…

AI Agent Tool Permissions: Risks, Controls & Best Practices

AI Red Teaming vs Penetration Testing: What’s the Difference and Why Enterprises Need Both?

Windows Persistence: 5 Common Techniques Every Blue Team and Red Team Should Understand

“Compromising a system is only the beginning. Staying on the system without being noticed is what makes an attack successful.”

The Chinese AI Did Not Save Hugging Face. It Was the Tool the Defenders Were Allowed to Use.

GLM 5.2 had the capability to help. Open weights made that capability available when hosted models were not.

COM Oversimplified: Understanding The Windows Technology Behind COM Hijacking, DCOM, and Modern…

Before we start, my apologies in advance. This is going to be a long one. Needed to really break this down as much as I can for y’all…

Logslinger Walkthrough — Exploiting Local File Inclusion (LFI) to Retrieve the User Flag

Author: Muhammad Abdullah Saif

Hwat’s Hell CTF Walkthrough: From Docker Setup to Root Flag

Auther: Abdullah Saif

CRTP Exam Experience

Certified Red Team Professional | Altered Security

CRTA Review: Is It Worth It in 2026?

I initially picked up the CRTA back in September 2025 during that $9 sale. At the time, I was buried in final-year coursework in Uni, and…

I Chained Four Privilege Escalation Bugs to Root a Box — Here’s the Full Breakdown

Purple Team Lab: Detection scenarios for Game Of Active Directory with Elastic EDR

Overview

Understanding URLs: Breaking Down Every Part of a Website Address

Introduction:

From a Login Screen to Account Takeover: A Critical Security Assessment of a Leading Investment…

Responsible Disclosure

How I Abused a Group Policy Object (GPO) in Active Directory (And How to Fix It)

Group Policy Objects (GPOs) are one of the most powerful features in Active Directory. They allow administrators to manage settings across…

Red Team Testing: Strengthen Your Cyber Defences with Real-World Attack Simulations

Cyber threats continue to evolve, making it essential for organisations to move beyond traditional security assessments. Firewalls…

How I Turned a Branch Name into Remote Code Execution

A source-to-sink analysis of CVE-2026–49987 in Repomix — and how a single missing delimiter bypassed built-in security controls and leads…

You Don’t Need a Data Science Degree to Get Good at AI Security. You Need These Resources.

A Security Engineer actual reading list for closing the AI security gap — verified resources, no fluff, no affiliate links

Youth AI Safety Red Teaming: Dangerous Advice

We tested four chatbots to see how they respond to minors across three risk areas: concealment from parents, medical misinformation, and…

I Learned API Penetration Testing in 4 Hours. Here’s What Actually Matters.

Most API security guides teach concepts. This one teaches how to think like an attacker.

Evading IDS, Firewalls and Honeypots

1. Introduction

Anatomy of a Multi-Layer Jailbreak: Why This Payload Fires

A segment-by-segment teardown of a stacked prompt-injection payload: what each piece does, why it works, and how the layers compound.

Red Team Testing: Simulating Real Attacks to Strengthen Cybersecurity

Cyber threats are becoming more sophisticated, making it increasingly difficult for organisations to identify and address security…

Task Execution Is Not Delivery.

And most security assessments never get past it.

Offensive PowerShell for Red Teamer with Defense Evasion Techniques

This post cover how PowerShell becomes a main tool in offensive operations starting with the weaponization, delivery and post-exploitation.

AWS CloudGoat EC2_SSRF Lab Walkthrough: Step-by-Step Manual Configuration and Exploitation

Overview:

ARTOC Course Review

Here is my review of the ARTOC course by White Knight Labs.

Two Years of Breaking Things — What Breach and Attack Simulation Actually Taught Me About…

When I first heard the term “Breach and Attack Simulation,” I thought it meant running attack scenarios in our own internal environment —…

ARTOC Course Review

Who Am I & Why My Opinion Matters

ARTOC Course Review

So i’ve been meaning to write this for a while now and i’m finally sitting down to do it. This is my review of the ARTOC course by White…

Your LLM Safety Eval Only Speaks English. Your Users Don’t.

A 2026 cross-lingual red-team broke an assumption I’d shipped on — and what per-locale evaluation actually looks like.

Strengthen The Defence Strategies Of Your Oraganisation With Purple Teaming

At present, cybersecurity threats are on rise. If you do not remain aware of them, your organisation may be at risk of losing its data and…

Web Cloaking y URL Filtering: Cómo engañar a los Guardianes de Internet

Cuando un empleado protegido con herramientas SSE intenta acceder a una web desde la red corporativa, algo ocurre antes de que le página…

Beyond the Firewall: Simulating a Full Enterprise Kill Chain from Phishing to Honeypot Detection

In modern cybersecurity, the perimeter is no longer just a wall; it’s a filter that attackers are increasingly adept at bypassing…

The Silent Heist: How the Latest GitHub Vulnerability Shook the Tech World

What if the ultimate security backdoor wasn’t forced through your firewall, but delivered directly to your codebase, signed and verified by…

Authority

Target IP:

DLL Hijacking — Three Variants with ProcMon Methodology

what if you didn’t need to hollow anything? What if Windows itself loads your malicious code, willingly, through its own loader?

The Dangerous Power of .htaccess Misconfigurations in File Uploads

Hello Readers

Malware Development Basics

Disclaimer: The information and code provided in this article are for educational and authorized red team simulation purposes only. Do not…

Red Team Services: Simulate Real Attacks. Strengthen Real Defenses.

In today’s evolving threat landscape, traditional security measures are no longer enough. Cyber attackers are becoming more advanced…

A Beginner’s Guide to Evading Modern Windows Defenses

By: Shinzer

ClickOnce: The Overlooked Windows LOLBin for Red Teamers

When red teamers think of Windows LOLBins, common names come to mind: mshta.exe, rundll32.exe, regsvr32.exe, installutil.exe. However, one…

What Every Hacker Should Know About EDR Telemetry

> Disclaimer ⚠️: This content is for defensive research and educational purposes. > Understanding detection mechanisms helps build better…

Mythic C2 Server Installation— 103

Mythic Installation

Mystic C2 Server Architecture— 102

Mythic Architecture

AMSI and Windows Evasion: Understanding the Modern Security Scenario

In today’s offensive security landscape, bypassing antivirus is no longer enough. Modern Windows environments are fortified with layered…

Reverse Engineering a 0day used Against CrowdStrike EDR

Hello again…

Safety Eval Passes Can Lie

Why safety suites get gamed, what “passing” can hide, and how stronger evaluation design actually reduces blind spots.

Hacking SmartCard Only AD Environments

Recently I have been involved heavily into researching PKI PIV secured Smart Cards, which has led to my discovery of a “new” TTP I will be…

Red Team Testing: Simulating Real Attacks to Strengthen Your Security

In today’s evolving threat landscape, traditional security measures are no longer enough to keep cybercriminals at bay. Businesses need…

2 Zero-Days in sliver! What if I found your Sliver payload?

I’ve been working on a feature to allow operators to move a running implant between servers on the fly; no fresh builds, no re-execution.