+1 234-249-1337
Jigsaw: Scramble Your Shellcode, Reassemble at Runtime
By Red Siege | March 12, 2026
by Jason Downey Encryption feels like the obvious move against shellcode detection, but it really just trades one problem for another. Sure, the recognizable patterns disappear. But now you’ve got […]
Learn MoreRed Siege at Wild West Hackin’ Fest Mile High 2026: What to Expect
By Red Siege | January 13, 2026
As proud sponsors of Wild West Hackin’ Fest, Red Siege is thrilled to return to Denver for another year of cutting-edge training, insightful talks, and unforgettable experiences. This event is […]
Learn MoreBypass Mode: Taking Down SSL Pinning in Web Apps
By Red Siege | November 6, 2025
by Stuart Rorer What is SSL Certificate Pinning SSL certificate pinning (HTTPS pinning/TLS pinning) is a security technique that is more often seen applied to mobile applications. However, over the […]
Learn MoreContent-Security-Policy: The Web Tester’s Headache
By Red Siege | November 6, 2025
by Stuart Rorer The Q*Bert Effect As a kid I loved playing a game called Q*Bert. You would control this alien-like creature with a long nose like an ant eater […]
Learn MoreAWS Security: The Basics With Buckets
By Red Siege | November 6, 2025
by Ian Briley Introduction to buckets: Hello and welcome to the first blog in my series about AWS and being secure while in the cloud. In this blog post we’re […]
Learn MoreErrors to Exploits: Mining Error Messages for Gold
By Red Siege | October 16, 2025
by Stuart Rorer A Comedy of Errors It has been said “to err is human, and to forgive divine”. However, I think sometimes it can be said errors come from […]
Learn MoreRed Siege at Wild West Hackin’ Fest 2025: What to Expect
By Red Siege | October 2, 2025
As proud sponsors of Wild West Hackin’ Fest, Red Siege is excited to return to Deadwood for another year of cutting-edge training, engaging talks, and unique experiences. The event is […]
Learn MoreThreat Detection Made Simple: Splunk Attack Range Basics
By Red Siege | September 22, 2025
by Ian Briley Let’s be honest, when starting a new skill or interest, one of the largest hurdles is setting up an environment//playground//attack range for your learning activities. Sometimes it […]
Learn MoreKerberoasting, Microsoft, and a Senator
By Tim Medin | September 11, 2025
Kerberoasting, Microsoft, and a Senator When I came up with Kerberoasting in 2014, I never thought it would live for more than a year or two. I (erroneously) thought that […]
Learn MoreStupid Simple: Windows Data Exfiltration
By Red Siege | September 8, 2025
by Ian Briley To get around a DLP (Data Loss Prevention) implementation, you don’t need a fancy C2 setup to exfil your treasures. In fact, it’s incredibly easy using native […]
Learn More