How to Convert Custom Queries from BloodHound Legacy to BloodHound CE

Complete guide to migrate and convert custom queries from Legacy BloodHound to BloodHound CE (Community Edition). Includes step-by-step instructions, popular query collections, and python automatio...

Jan 10, 2025 Hacking, Red Team, Security Tools, Active Directory, Network Security, Pentesting

Concealing Payloads: Hiding Shellcode in Image Files with Python and C/C++

Learn how to hide shellcode payloads in plain sight by embedding them into image files, such as PNGs, using Python. Discover how to store embedded images in the resources section of a binary file a...

Dec 17, 2024 Malware Development, Cybersecurity, Hacking, Programming, EDR Evasion, Red team, Python, Steganography, C

API Testing with Insomnia and Burp Suite: An Alternative to Postman

Learn how to use Insomnia and Burp Suite for API testing and hacking as a powerful alternative to Postman. Set up Insomnia, capture API requests with mitmproxy, convert them to OpenAPI 3.0 format, ...

Dec 11, 2024 API Testing, Cybersecurity, Hacking, Programming, Penetration Testing, API Security, Red Team

Bypass YARA Rule f0b627fc for CobaltStrike to Evade EDRs

Learn how to bypass the YARA rule Windows_Trojan_CobaltStrike_f0b627fc targeting Cobalt Strike’s signature shellcode by replacing key bytes with alternative shellcode and using a Python script to r...

Oct 16, 2024 Malware, Cybersecurity, Hacking, Programming, EDR Evasion, Red team, Python

Indirect Waffles - Shellcode Loader to Bypass EDRs

A shellcode loader that leverages advanced techniques such as HellHall's indirect syscalls, Early Bird APC injection, and more, to evade EDR detection and enhance payload delivery.

Oct 13, 2024 Malware, CPP, Hacking, Programming, Shellcode Loader, EDR Evasion, Red team

How to Easily Build a Malware Testing Lab with Elastic EDR and TCM's AD Lab

Learn how to easily create your own malware testing lab with a pre-configured Elastic EDR in Docker, integrated with TCM Security’s AD lab for malware evasion testing.

Sep 12, 2024 Malware, Lab, Hacking, EDR Evasion, Red team, Penetration testing

Dynamic HTTP(S) Payload Stager

A dynamic HTTP/s Stager that automates updating decryption variables, saving time and effort in managing shellcode loaders.

Sep 12, 2024 Malware, CPP, Hacking, Programming, Payload Stager, EDR Evasion, Red team

How to Convert .bin Files to C Arrays and Back Using xxd on Linux

Learn how to convert binary (.bin) files to and from C-style arrays using the Linux tool xxd.

Sep 1, 2024 Linux, Malware, Hacking, Programming

Waffles Crypt: A Modular Approach to Shellcode Encryption and Obfuscation in C/C++

Waffles Crypt is a versatile C/C++ tool for encrypting and obfuscating shellcode.

Aug 24, 2024 Malware, CPP, Hacking, Programming, EDR Evasion

Writing custom Shellcode - C++ to ASM to Shellcode

Learn how to easily write custom Shellcode by converting C++ to ASM to Shellcode.

Aug 10, 2024 Malware, CPP, Hacking, Programming