+1 234-249-1337
How to Set Up Proxifier for Penetration Testing
By Red Siege | September 8, 2025
by Justin Palk ProxyChains is a great tool for running Linux-based tools, such as those in Impacket, and everything built on top of them, but sometimes there’s a .NET tool […]
Learn MoreGetting Started with Proxy Chains
By Red Siege | September 8, 2025
by Justin Palk Oftentimes on an assumed breach test, we need or want to run tools on our local Kali VM and proxy them into the client’s network over a […]
Learn MoreBreaking Clean: Dodging Sanitization with Event Handler Tricks
By Red Siege | August 14, 2025
by Larry Ellis Background Coming off my time in the defensive world in the military, I’ve always had an interest in web application testing. Flipping the script from out-thinking an […]
Learn MoreChanging Directions: Attacking with Open Redirects
By Red Siege | August 7, 2025
by Stuart Rorer Open Redirection Whenever I think of open redirection, I think of Super Mario games and the green plumbing pipes. By hopping into one I can easily transport […]
Learn MoreEagle Eye: Efficient Directory and File Enumeration
By Red Siege | August 7, 2025
by Stuart Rorer Hide and Seek I always loved playing hide and seek as a kid, our house had a laundry chute in the upstairs bathroom which made it easy […]
Learn MorePenetration Testing in SDLC
By Red Siege | July 2, 2025
by Douglas Berdeaux Determining where in your software development lifecycle (SDLC) to have a penetration test carried out can be tricky. This article aims to guide new development shops at […]
Learn MoreLogic Attacks: Abusing The System
By Red Siege | July 2, 2025
by Stuart Rorer Never Satisfied I was something of a devious child, always coming up with schemes. One that worked well was when my parents would go through the drive […]
Learn MoreAuthentication vs. Authorization in Web App Penetration Testing
By Red Siege | June 4, 2025
by Douglas Berdeaux Introduction Authentication and Authorization in web application penetration testing are so closely related, that it’s easy to confuse the two. This article aims to outline each process, […]
Learn MoreThe Aftermath Part 4: The Vendor Requirement
By Red Siege | June 2, 2025
by Jason Downey The Vendor Requirement The final entry in The Aftermath blog series. At this point, I had successfully social engineered credentials, bypassed multifactor authentication, and established command and […]
Learn MoreThe Aftermath Part 3: The Simple Stuff
By Red Siege | June 2, 2025
by Jason Downey The Simple Stuff So far in The Aftermath Blog Series, I had social engineered credentials, bypassed MFA, and gained access to a VDI environment. In this entry, […]
Learn More