Malware & C2 Malleable C2 Profiles and Network Signature Evasion
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Yunolay
Malware & C2 
Malware & C2 Shellcode Loaders and Common Evasion Patterns
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Format String Vulnerabilities: Leaks and Writes
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Return-Oriented Programming (ROP) Against DEP
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Stack Buffer Overflows: From Crash to Control
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Ghidra for Reverse Engineering and Binary Triage
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Heap Exploitation: Use-After-Free and Tcache Poisoning
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn Integer Overflows and Type Confusion Bugs
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Malware & C2 Anti-Debugging and Unpacking Malware Samples
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security S3 Bucket Misconfiguration and Data Exposure
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Abusing AWS Instance Metadata (IMDS) and SSRF
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS IAM Privilege Escalation Paths
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Azure AD / Entra ID Token Theft and Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security GCP Service Account Impersonation and Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Kubernetes RBAC Abuse and Privilege Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Cloud Credential Harvesting and Secret Sprawl
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Kubernetes Secrets and etcd Exposure
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Serverless and Lambda Security Pitfalls
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Docker Image Security: Layers, Secrets, and Scanning
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Container Escapes: Privileged Containers and Host Mounts
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Admission Control and Pod Security in Kubernetes
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps Infrastructure as Code Security: Terraform and Misconfigs
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps CI/CD Pipeline Attacks and Supply-Chain Risk
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Phishing and Pretexting in Authorized Red-Team Engagements
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Password Cracking with Hashcat: Modes and Strategy
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security Threat Modeling with STRIDE for Application Design
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Building a Home Lab for Offensive Security Practice
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Incident Response Fundamentals: The PICERL Lifecycle
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS EKS Security: IRSA and Pod Identity
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Azure Storage Accounts and SAS Token Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Azure Key Vault: Access Policies vs RBAC
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Kerberos Bronze Bit Attack (CVE-2020-17049) Explained
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS Organizations and Service Control Policies (SCP) Security
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security GCP Workload Identity and Cloud Functions Security
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security GCP Organization Policy and IAM Conditions
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Cloud Detection Engineering with CloudTrail and GuardDuty
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc systemd Security: Unit Sandboxing and Common Misconfigurations
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS Cognito Misconfigurations and Identity Pool Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Linux Privesc Ambient and Inheritable Linux Capabilities Explained
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Linux auditd: Configuration and Threat Hunting
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...