Red team
5 posts
Red Team
RegisterXLL: Testing Excel's XLL Security Boundary
How Excel's RegisterXLL automation method loads native add-in code through a path that did not enforce the MOTW and extension checks observed in the interactive UI.
Red Team
Brewing Your Own Offensive Coding Assistant: Fine-Tuning a Local LLM
A practitioner's walkthrough of QLoRA fine-tuning a local coding model with Unsloth, evaluating it, and deploying it through Ollama.
Red Team
VibeLoader: Loading for Fun and No Profit
An implementation-focused walkthrough of VibeLoader's APC, fiber, module-stomping, payload-encoding, and memory-management experiments.
Red Team
Using AWS Lambda as a C2 Redirector
How to route authorized C2 traffic through API Gateway and AWS Lambda while keeping the team server behind controlled egress.
Red Team
Modern C2 Usage: Frameworks, Tradecraft, and Infrastructure
A practical overview of modern command and control frameworks, infrastructure design, and operational tradecraft for red team engagements.