+1 234-249-1337
This is not the Access Policy you’re looking for
By Red Siege | October 1, 2026
by Mike Saunders The AWS ReadOnlyAccess policy might be providing more access than you’re intending to grant. On a recent assessment, we observed widespread use of IAM roles with the […]
Learn MoreRed Siege at Wild West Hackin’ Fest Deadwood 2026: What to Expect
By Red Siege | September 24, 2026
As proud sponsors of Wild West Hackin’ Fest, Red Siege is heading back to Deadwood! WWHF is always a big one for us, and this year we’re bringing training, talks, […]
Learn MoreImproving Your Simple Windows Domain for Offensive Testing: Installing MS SQL Server Express on Windows Server 2022 Server Core Edition
By Red Siege | September 3, 2026
by Justin Palk A couple of years ago, I put together a series on standing up a simple Windows AD domain in a lab environment. This article is part of […]
Learn MoreImproving Your Simple Windows Domain for Offensive Testing: Sysmon
By Red Siege | August 13, 2026
by Justin Palk A couple of years ago, I put together a series on standing up a simple Windows AD domain in a lab environment. This article is part of […]
Learn MoreImproving Your Simple Windows Domain for Offensive Testing: Elastic Defend EDR
By Red Siege | July 7, 2026
by Justin Palk A couple of years ago, I put together a series on standing up a simple Windows AD domain in a lab environment. This is the start of […]
Learn MoreEnumerate Domain Data (EDD): Powerview’s .NET Cousin
By Red Siege | June 11, 2026
EDD: PowerView’s .NET Cousin By Jason Downey If you’ve done any Active Directory enumeration, you’ve probably used PowerView. It for a bunch of years was the gold standard, so much […]
Learn MoreWhen All Else Fails: PowerShell Reflective Assembly Loading
By Red Siege | April 9, 2026
by Ian Briley Sometimes an older trick is the only trick that will work for you on an engagement. Case in point, recently I was on an engagement, where if […]
Learn MoreTool – EyeWitness
By Red Siege | April 9, 2026
by Jason Downey EyeWitness: Because Nobody Has Time to Visit 500 URLs Every pentest has that moment during recon where you’ve got a list of web servers a mile long […]
Learn MoreIDN Homograph Attacks: More Steps, Same Deception
By Red Siege | March 12, 2026
by Ian Briley An IDN homograph attack is just the super ivory-tower way of saying typosquatting using characters not typically found in American English but look close to existing American […]
Learn MoreJigsaw: Scramble Your Shellcode, Reassemble at Runtime
By Red Siege | March 12, 2026
by Jason Downey Encryption feels like the obvious move against shellcode detection, but it really just trades one problem for another. Sure, the recognizable patterns disappear. But now you’ve got […]
Learn More