#red-team
6 posts
RegisterXLL: Testing Excel's XLL Security Boundary
How Excel's RegisterXLL automation method loads native add-in code through a path that did not enforce the MOTW and extension checks observed in the interactive UI.
Brewing Your Own Offensive Coding Assistant: Fine-Tuning a Local LLM
A practitioner's walkthrough of QLoRA fine-tuning a local coding model with Unsloth, evaluating it, and deploying it through Ollama.
VibeLoader: Loading for Fun and No Profit
An implementation-focused walkthrough of VibeLoader's APC, fiber, module-stomping, payload-encoding, and memory-management experiments.
Using AWS Lambda as a C2 Redirector
How to route authorized C2 traffic through API Gateway and AWS Lambda while keeping the team server behind controlled egress.
Modern C2 Usage: Frameworks, Tradecraft, and Infrastructure
A practical overview of modern command and control frameworks, infrastructure design, and operational tradecraft for red team engagements.
Welcome to BrewCoffee Offensive Security Blog
Introducing this blog - a space for offensive security research, penetration testing techniques, and red team operations.