red-team
8 posts found
Web Endpoint Reconnaissance: A 10-Point Attack Surface Checklist
A 10-point external reconnaissance audit checklist covering HTTP headers, DNS hygiene, TLS configuration, and perimeter exposure using open-source OSINT tooling…
Building Disposable Pentest Sandboxes with HuntKit
A practical five-step guide to configuring HuntKit in Docker for isolated penetration testing, volume-mapped loot storage, and network interface manipulation.
North Korea’s $11M Crypto Job Interview Scheme: How Remote Hiring Became an Attack Vector
Seven U.S. intelligence agencies tied a $11M cryptocurrency theft to North Korean recruitment fraud. Fake job interviews, credential harvesting, and cryptocurre…
Autonomous Vulnerability Discovery: Replacing Static SAST with Adversarial Verifiers
Static code scanners drown engineering teams in unverified alerts. Autonomous security harnesses now combine deterministic coverage ledgers with adversarial ver…
bgscan vs WebCheck-OSINT: Two Ways to Run an Engagement Recon Pass
bgscan sweeps networks from a BubbleTea TUI, chaining ICMP, TCP, HTTP, DNS, and tunnel probes into one run. WebCheck-OSINT dissects a single site from a self-ho…
Voltage Glitching and Side-Channel Leakage in Embedded Cryptographic Silicon
Hardware security modules and cold storage wallets isolate private keys inside microcontroller flash memory. When attackers obtain physical access, precision vo…
Mapping AI Agent Skills to MITRE ATT&CK Frameworks
An interview on structuring autonomous AI agent skills with MITRE ATT&CK and NIST CSF for safer automated defensive operations.
Mobile Security Hardening: A Red Team Checklist
A practical mobile security checklist for red team operators. Covers device encryption, network traffic inspection, certificate pinning bypass, SIM swap attacks…