https://redsiege.com/tools-techniques/2018/03/germany-says-auf-wiedersehen-to-hi-tech-doll/2018-03-28T15:47:54-05:00https://redsiege.com/tools-techniques/2015/11/doll-hacking-good-badwords-and-ugly/2015-11-18T15:53:33-06:00https://redsiege.com/tools-techniques/2018/01/beyond-net-user-part-1-limitations-of/2018-01-30T16:22:55-06:00https://redsiege.com/tools-techniques/2018/02/beyond-net-user-part-2-ds-commands/2018-02-06T16:35:44-06:00https://redsiege.com/tools-techniques/2018/01/better-fde-passphrase-with-macos/2018-01-26T16:48:34-06:00https://redsiege.com/tools-techniques/2017/12/3-years-of-directv-user-agent-command/2017-12-26T17:00:15-06:00https://redsiege.com/tools-techniques/2018/07/getting-a-handle-on-large-parameter-sets/2018-07-19T11:58:33-05:00https://redsiege.com/tools-techniques/2018/07/getting-to-the-actual-goal/2018-07-10T10:25:31-05:00https://redsiege.com/tools-techniques/2018/05/red-siege-brings-on-saunders-as-principal-consultant/2018-05-07T15:07:22-05:00https://redsiege.com/tools-techniques/2018/09/maintaining-session-states-in-net-apps-with-burp/2018-09-21T09:54:28-05:00https://redsiege.com/tools-techniques/2018/09/capturing-sql-server-user-hash-with-sqli/2018-09-05T15:00:00-05:00https://redsiege.com/tools-techniques/2019/05/logging-passwords-on-linux/2023-05-22T08:15:20-05:00https://redsiege.com/tools-techniques/2018/10/derbycon-8-web-app-101-lay-of-the-land/2018-10-05T12:35:04-05:00https://redsiege.com/tools-techniques/2018/11/sqli-data-exfiltration-via-dns/2018-11-30T15:48:46-06:00https://redsiege.com/tools-techniques/2019/03/finding-the-silver-lining-in-getting-your-teeth-kicked-in/2019-03-27T09:09:11-05:00https://redsiege.com/blog/2019/12/cobalt-strike-variants/2023-07-31T11:03:46-05:00https://redsiege.com/blog/2020/02/another-msbuild-bypass/2023-08-30T11:11:01-05:00https://redsiege.com/tools-techniques/2019/05/breaking-into-infosec/2019-05-07T16:39:28-05:00https://redsiege.com/tools-techniques/2019/05/corey-overstreet/2019-05-23T10:43:56-05:00https://redsiege.com/blog/2020/03/introducing-c2concealer/2023-07-31T11:51:16-05:00https://redsiege.com/tools-techniques/2019/07/purple/2019-07-12T10:30:51-05:00https://redsiege.com/tools-techniques/2019/08/enterprise-security-names-red-siege-as-a-top-10-vulnerability-management-company-for-2019/2019-08-06T08:25:45-05:00https://redsiege.com/tools-techniques/2019/08/open-source-intelligence-through-messaging-apps/2019-08-19T12:21:57-05:00https://redsiege.com/blog/2020/04/remotely-host-msbuild-payloads/2023-08-30T11:24:33-05:00https://redsiege.com/tools-techniques/2020/01/lessons-learned-in-password-cracking/2020-01-16T12:20:09-06:00https://redsiege.com/tools-techniques/2020/01/user-enumeration-part-1-building-name-lists/2020-01-30T17:15:00-06:00https://redsiege.com/tools-techniques/2020/03/user-enumeration-part-2-microsoft-office-365/2020-03-10T12:38:51-05:00https://redsiege.com/tools-techniques/2020/02/recon-methods-part-1-osint-host-discovery/2020-02-04T13:55:59-06:00https://redsiege.com/tools-techniques/2020/02/recon-methods-part-2-osint-host-discovery-continued/2022-12-14T10:19:31-06:00https://redsiege.com/tools-techniques/2020/02/recon-methods-part-3-osint-employee-discovery/2020-02-27T12:52:36-06:00https://redsiege.com/tools-techniques/2020/02/1220-2/2020-02-18T15:20:26-06:00https://redsiege.com/tools-techniques/2020/02/i-want-my-eip-buffer-overflow-101-at-nolacon/2020-02-18T15:28:29-06:00https://redsiege.com/tools-techniques/2020/03/deceiving-the-red-team-with-gpp/2020-03-24T10:44:55-05:00https://redsiege.com/tools-techniques/2020/04/user-enumeration-part-3-windows/2020-04-16T15:45:24-05:00https://redsiege.com/tools-techniques/2020/04/recon-methods-part-4-automated-osint/2020-04-01T10:22:06-05:00https://redsiege.com/blog/2021/08/customizing-c2concealer-part-2/2023-07-31T12:54:39-05:00https://redsiege.com/tools-techniques/2020/04/recon-methods-part-5-traffic-on-the-target/2020-04-07T11:07:40-05:00https://redsiege.com/blog/2022/02/httpsc2doneright-and-working/2023-07-31T11:27:05-05:00https://redsiege.com/siegecast/2020/05/siegecast-huge-needles-small-haystack/2020-05-11T03:49:41-05:00https://redsiege.com/siegecast/2020/06/access-still-granted/2024-03-21T15:00:24-05:00https://redsiege.com/siegecast/2020/06/enemy/2020-06-23T04:14:01-05:00https://redsiege.com/siegecast/2020/07/assumebreach1/2020-07-20T06:26:20-05:00https://redsiege.com/siegecast/2020/08/siegecast-assumed-breach-part-ii/2020-08-18T06:33:44-05:00https://redsiege.com/tools-techniques/2020/08/cioreview/2022-11-07T14:24:42-06:00https://redsiege.com/siegecast/2020/08/kerbattacks/2020-08-25T06:17:07-05:00https://redsiege.com/siegecast/2020/09/buf1/2020-09-22T05:31:07-05:00https://redsiege.com/tools-techniques/2020/10/detecting-kerberoasting/2020-10-21T10:22:10-05:00https://redsiege.com/tools-techniques/2020/10/netcat-and-mfds-the-gifts-that-keep-on-giving/2020-10-30T09:32:06-05:00https://redsiege.com/siegecast/2020/11/1972-2/2020-11-09T05:27:33-06:00https://redsiege.com/siegecast/2020/11/siegecast-unpacking-the-packet/2024-03-21T13:48:06-05:00https://redsiege.com/tools-techniques/2020/12/bg/2020-12-08T15:22:03-06:00https://redsiege.com/tools-techniques/2021/01/depthmatters/2021-01-06T11:56:07-06:00https://redsiege.com/tools-techniques/2021/01/webapi1/2021-01-11T11:05:06-06:00https://redsiege.com/tools-techniques/2021/02/networkfunpart1/2021-02-10T12:09:13-06:00https://redsiege.com/tools-techniques/2021/03/hackingoauth/2021-03-22T09:46:16-05:00https://redsiege.com/tools-techniques/2021/08/netwarseu/2021-08-09T11:30:18-05:00https://redsiege.com/uncategorized/2021/08/streaming/2024-03-21T13:31:51-05:00https://redsiege.com/siegecast/2021/08/spray/2021-08-24T06:48:02-05:00https://redsiege.com/tools-techniques/2021/08/bypass-sig-av/2022-05-25T16:02:09-05:00https://redsiege.com/uncategorized/2021/09/siegecast-cobalt-strike-basics/2024-03-21T13:31:29-05:00https://redsiege.com/uncategorized/2021/10/proper/2024-03-21T13:31:00-05:00https://redsiege.com/tools-techniques/2021/11/attacking-saml-implementations/2021-11-02T12:24:36-05:00https://redsiege.com/siegecast/2022/04/siegecast-practical-people-hacking/2024-03-21T13:28:51-05:00https://redsiege.com/blog/2022/11/introduction-to-sliver/2023-02-21T17:47:56-06:00https://redsiege.com/blog/2022/06/simpledomainp1/2022-06-15T08:58:14-05:00https://redsiege.com/blog/2022/06/simpledomainp2/2022-06-08T09:36:35-05:00https://redsiege.com/blog/2022/06/simpledomainp3/2022-06-15T09:42:36-05:00https://redsiege.com/blog/2022/06/creating-a-simple-windows-domain-for-offensive-testing-part-4/2024-01-31T20:14:47-06:00https://redsiege.com/blog/2022/07/beyondt4/2022-07-06T13:18:03-05:00https://redsiege.com/blog/2022/11/the-power-of-adaptability-through-experience/2022-11-21T13:36:51-06:00https://redsiege.com/blog/2022/12/strategyguide/2022-12-05T13:11:08-06:00https://redsiege.com/blog/2023/04/evading-crowdstrike-falcon-using-entropy/2023-04-11T15:56:27-05:00https://redsiege.com/blog/2023/06/introduction-to-mythic-c2/2023-07-31T12:25:28-05:00https://redsiege.com/blog/2023/06/red-siege-acquires-fortynorth-security/2023-06-05T12:45:44-05:00https://redsiege.com/blog/2021/06/ordinal-values-and-c/2023-07-31T12:20:36-05:00https://redsiege.com/blog/2021/07/customizing-c2concealer-part-1/2023-07-31T12:54:25-05:00https://redsiege.com/blog/2023/07/obfuscating-shellcode-using-jargon/2024-06-24T09:34:46-05:00https://redsiege.com/blog/2023/07/browser-only-web-application-testing/2024-03-18T12:17:03-05:00https://redsiege.com/blog/2023/08/housecat_to_hashcat/2024-03-18T12:16:45-05:00https://redsiege.com/blog/2023/09/vishing-how-to-protect-your-business-from-phone-based-social-engineering-attacks/2023-09-22T14:24:01-05:00https://redsiege.com/blog/2023/10/click-everything-burp/2024-01-31T20:22:38-06:00https://redsiege.com/blog/2024/07/preparing-for-a-penetration-test-insights-from-tim-medin-ceo-of-red-siege-information-security/2024-08-26T11:31:46-05:00https://redsiege.com/blog/2023/11/reject-passwords/2023-11-28T15:53:47-06:00https://redsiege.com/blog/2024/01/you-cant-see-me-protecting-your-phishing-infrastructure/2024-06-13T16:35:01-05:00https://redsiege.com/blog/2024/01/graphstrike-developer/2024-03-18T12:15:35-05:00https://redsiege.com/blog/2024/01/graphstrike-release/2024-03-18T12:15:30-05:00https://redsiege.com/blog/2024/02/better-living-through-openssh-config-files/2024-03-18T12:15:06-05:00https://redsiege.com/blog/2024/03/dumping-lsass-like-its-2019/2024-03-18T12:14:59-05:00https://redsiege.com/blog/2024/03/jigsaw/2024-03-18T12:03:21-05:00https://redsiege.com/blog/2024/03/how-just-metadata-reinvents-ip-analysis/2024-03-21T12:45:14-05:00https://redsiege.com/blog/2024/03/navigating-active-directory-security-with-edd/2024-03-21T12:41:14-05:00https://redsiege.com/blog/2024/04/sshishing-abusing-shortcut-files-and-the-windows-ssh-client-for-initial-access/2024-04-01T08:34:29-05:00https://redsiege.com/blog/2024/04/using-microsoft-dev-tunnels-for-c2-redirection/2024-04-09T12:22:24-05:00https://redsiege.com/blog/2024/04/introducing-delta-encoder/2024-04-15T09:00:03-05:00https://redsiege.com/blog/2024/05/extend-your-browser/2024-05-21T11:39:59-05:00https://redsiege.com/blog/2024/05/fun-with-jwt-x5u/2024-05-30T09:27:56-05:00https://redsiege.com/blog/2024/06/adventures-in-shellcode-obfuscation-part-1-overview/2024-07-01T13:54:39-05:00https://redsiege.com/blog/2024/06/essential-steps-for-management-to-maximize-the-value-of-a-penetration-test-report/2025-06-03T07:36:54-05:00https://redsiege.com/blog/2024/06/adventures-in-shellcode-obfuscation-part-2-hail-caesar/2024-06-26T08:38:29-05:00https://redsiege.com/blog/2024/06/phone-switch-labs-ctf-walk-through/2024-06-26T09:03:07-05:00https://redsiege.com/blog/2024/07/adventures-in-shellcode-obfuscation-part-3-encryption/2024-07-18T12:07:13-05:00https://redsiege.com/blog/2024/07/adventures-in-shellcode-obfuscation-part-4-rc4-with-a-twist/2024-07-08T13:22:37-05:00https://redsiege.com/blog/2024/07/advenutures-in-shellcode-obfuscation-part-5-base64/2024-07-18T12:17:35-05:00https://redsiege.com/blog/2024/07/adventures-in-shellcode-obfuscation-part-6-two-array-method/2024-07-23T12:29:45-05:00https://redsiege.com/blog/2024/07/out-of-chaos-applying-structure-to-wapt/2024-07-25T12:34:30-05:00https://redsiege.com/blog/2024/08/adventures-in-shellcode-obfuscation-part-7-flipping-the-script/2024-08-01T13:49:16-05:00https://redsiege.com/blog/2024/08/adventures-in-shellcode-obfuscation-part-8-shellcode-as-uuids/2024-08-06T11:10:13-05:00https://redsiege.com/blog/2024/08/defense-in-depth-of-a-single-http-parameter/2024-08-08T11:30:26-05:00https://redsiege.com/blog/2024/08/adventures-in-shellcode-obfuscation-part-9-shellcode-as-ip-addresses/2024-08-15T14:12:19-05:00https://redsiege.com/blog/2024/08/adventures-in-shellcode-obfuscation-part-10-shellcode-as-mac-addresses/2026-03-04T07:41:40-06:00https://redsiege.com/blog/2024/08/adventures-in-shellcode-obfuscation-part-11-jargon/2024-08-29T10:26:51-05:00https://redsiege.com/blog/2024/09/how-to-secure-your-penetration-testing-environment-with-full-disk-encryption/2024-09-03T14:19:13-05:00https://redsiege.com/blog/2024/09/adventures-in-shellcode-obfuscation-part-12-jigsaw/2024-09-06T10:03:49-05:00https://redsiege.com/blog/2024/09/siegecast-be-your-enemy/2025-06-30T10:36:30-05:00https://redsiege.com/blog/2024/09/adventures-in-shellcode-obfuscation-part-13-calculating-offsets/2024-09-13T11:00:13-05:00https://redsiege.com/blog/2024/09/adventures-in-shellcode-obfuscation-part-14-further-research/2024-09-20T14:12:56-05:00https://redsiege.com/blog/2024/10/red-siege-at-wild-west-hackin-fest-2024-what-to-expect/2024-10-15T15:12:10-05:00https://redsiege.com/blog/2024/10/the-vishing-ctf-challenge/2025-11-06T06:54:52-06:00https://redsiege.com/siegecast/2024/10/siegecast-modern-malware/2024-10-17T08:31:25-05:00https://redsiege.com/blog/2025/01/time-hacking-pause-analyze-exploit/2026-06-12T09:29:57-05:00https://redsiege.com/blog/2025/02/red-siege-at-wild-west-hackin-fest-mile-high-2025-what-to-expect/2025-02-02T13:03:53-06:00https://redsiege.com/blog/2025/02/continuous-penetration-testing-explained/2025-02-25T14:37:46-06:00https://redsiege.com/blog/2025/03/regex-simplicity-security-and-power/2025-03-05T09:11:00-06:00https://redsiege.com/blog/2025/07/logic-attacks-abusing-the-system/2026-02-26T12:57:24-06:00https://redsiege.com/blog/2025/05/relics-of-the-past/2025-12-04T07:39:34-06:00https://redsiege.com/blog/2025/10/errors-to-exploits-mining-error-messages-for-gold/2026-02-26T12:50:49-06:00https://redsiege.com/blog/2025/08/changing-directions-attacking-with-open-redirects/2026-02-26T12:59:21-06:00https://redsiege.com/blog/2025/08/eagle-eye-efficient-directory-and-file-enumeration/2026-02-26T12:58:11-06:00https://redsiege.com/blog/2025/06/the-aftermath-part-1-the-phone-call/2025-11-06T06:55:38-06:00https://redsiege.com/blog/2025/06/the-aftermath-part-2-the-condition/2025-11-06T06:55:31-06:00https://redsiege.com/blog/2025/06/the-aftermath-part-3-the-simple-stuff/2025-11-06T06:55:25-06:00https://redsiege.com/blog/2025/06/the-aftermath-part-4-the-vendor-requirement/2025-11-06T06:55:19-06:00https://redsiege.com/blog/2025/06/authentication-vs-authorization-in-web-app-penetration-testing/2025-11-06T06:54:21-06:00https://redsiege.com/blog/2025/07/penetration-testing-in-sdlc/2025-11-06T06:54:06-06:00https://redsiege.com/blog/2025/08/breaking-clean-dodging-sanitization-with-event-handler-tricks/2025-08-14T08:29:48-05:00https://redsiege.com/blog/2025/09/stupid-simple-windows-data-exfiltration/2026-06-12T09:29:37-05:00https://redsiege.com/blog/2025/09/how-to-set-up-proxifier-for-penetration-testing/2025-12-04T08:09:51-06:00https://redsiege.com/blog/2025/09/getting-started-with-proxy-chains/2026-02-26T12:52:38-06:00https://redsiege.com/blog/2025/09/kerberoasting-microsoft-and-a-senator/2025-09-12T11:23:44-05:00https://redsiege.com/blog/2025/09/threat-detection-made-simple-splunk-attack-range-basics/2026-02-26T12:46:57-06:00https://redsiege.com/blog/2025/11/aws-security-the-basics-with-buckets/2026-02-26T12:49:25-06:00https://redsiege.com/blog/2025/10/red-siege-at-wild-west-hackin-fest-2025-what-to-expect/2025-10-03T07:22:51-05:00https://redsiege.com/blog/2025/11/bypass-mode-taking-down-ssl-pinning-in-web-apps/2025-11-18T08:50:39-06:00https://redsiege.com/blog/2025/11/content-security-policy-the-web-testers-headache/2026-02-26T12:47:38-06:00https://redsiege.com/blog/2026/01/red-siege-at-wild-west-hackin-fest-mile-high-2026-what-to-expect/2026-01-19T12:39:02-06:00https://redsiege.com/blog/2026/03/idn-homograph-attacks-more-steps-same-deception/2026-03-12T12:59:40-05:00https://redsiege.com/blog/2026/04/tool-eyewitness/2026-07-07T08:40:18-05:00https://redsiege.com/blog/2026/06/tool-edd/2026-06-11T12:52:29-05:00https://redsiege.com/blog/2026/03/jigsaw-scramble-your-shellcode-reassemble-at-runtime/2026-03-12T12:59:49-05:00https://redsiege.com/blog/2026/04/when-all-else-fails-powershell-reflective-assembly-loading/2026-07-07T08:40:12-05:00https://redsiege.com/blog/2026/07/improving-your-simple-windows-domain-for-offensive-testing-elastic-defend-edr/2026-07-14T11:46:49-05:00https://redsiege.com/blog/2026/08/improving-your-simple-windows-domain-for-offensive-testing-sysmon/2026-08-18T11:43:08-05:00