+1 234-249-1337
Improving Your Simple Windows Domain for Offensive Testing: Installing MS SQL Server Express on Windows Server 2022 Server Core Edition
By Red Siege | September 3, 2026
by Justin Palk A couple of years ago, I put together a series on standing up a simple Windows AD domain in a lab environment. This article is part of […]
Learn MoreImproving Your Simple Windows Domain for Offensive Testing: Sysmon
By Red Siege | August 13, 2026
by Justin Palk A couple of years ago, I put together a series on standing up a simple Windows AD domain in a lab environment. This article is part of […]
Learn MoreImproving Your Simple Windows Domain for Offensive Testing: Elastic Defend EDR
By Red Siege | July 7, 2026
by Justin Palk A couple of years ago, I put together a series on standing up a simple Windows AD domain in a lab environment. This is the start of […]
Learn MoreEnumerate Domain Data (EDD): Powerview’s .NET Cousin
By Red Siege | June 11, 2026
EDD: PowerView’s .NET Cousin By Jason Downey If you’ve done any Active Directory enumeration, you’ve probably used PowerView. It for a bunch of years was the gold standard, so much […]
Learn MoreWhen All Else Fails: PowerShell Reflective Assembly Loading
By Red Siege | April 9, 2026
by Ian Briley Sometimes an older trick is the only trick that will work for you on an engagement. Case in point, recently I was on an engagement, where if […]
Learn MoreTool – EyeWitness
By Red Siege | April 9, 2026
by Jason Downey EyeWitness: Because Nobody Has Time to Visit 500 URLs Every pentest has that moment during recon where you’ve got a list of web servers a mile long […]
Learn MoreIDN Homograph Attacks: More Steps, Same Deception
By Red Siege | March 12, 2026
by Ian Briley An IDN homograph attack is just the super ivory-tower way of saying typosquatting using characters not typically found in American English but look close to existing American […]
Learn MoreJigsaw: Scramble Your Shellcode, Reassemble at Runtime
By Red Siege | March 12, 2026
by Jason Downey Encryption feels like the obvious move against shellcode detection, but it really just trades one problem for another. Sure, the recognizable patterns disappear. But now you’ve got […]
Learn MoreBypass Mode: Taking Down SSL Pinning in Web Apps
By Red Siege | November 6, 2025
by Stuart Rorer What is SSL Certificate Pinning SSL certificate pinning (HTTPS pinning/TLS pinning) is a security technique that is more often seen applied to mobile applications. However, over the […]
Learn MoreContent-Security-Policy: The Web Tester’s Headache
By Red Siege | November 6, 2025
by Stuart Rorer The Q*Bert Effect As a kid I loved playing a game called Q*Bert. You would control this alien-like creature with a long nose like an ant eater […]
Learn More