Blog

Serverless C2 Redirectors: Lambda Functions and Infrastructure as Code

Red Team

Build a serverless C2 redirector using AWS Lambda and API Gateway, deployed with Terraform. No persistent server, no attack surface, teardown in one command.

Three Ways to Hide C2 in Trusted Traffic

Red Team Blue Team

Three techniques that exploit implicit trust in cloud providers: domain fronting, cloud service tunneling, and dead drops. Each strips away one more thing defenders can grab onto.

Layered Red Team C2 Infrastructure: Architecture and Trust Boundaries

Red Team

A deep dive into layered red team C2 infrastructure design, covering how CDNs, redirectors, and trust boundaries work together to protect your C2 server from defender discovery.

When Azure Relay Becomes a Red Teamer's Highway

Red Team

Microsoft's Azure Relay Bridge (azbridge) creates encrypted tunnels between on-premises resources and Azure. Learn how red teamers can leverage this legitimate service for covert communications.

InfluenceOps: Tactical Pretexting Part 3

Red Team Social Engineering

This article is part three and the final installment of our InfluenceOps series on tactical pretexting for social engineering engagements.

Splunk BOTS V1: Ransomware

Blue Team Write-ups

Splunk's Boss of the SOC is essentially a CTF-style challenge for blue teamers. Walk through the ransomware scenario and learn how to hunt threats using Splunk.

InfluenceOps: Tactical Pretexting Part 2

Red Team Social Engineering

Part two of our series on tactical pretexting continues with advanced techniques for building convincing personas and executing social engineering campaigns.

InfluenceOps: Tactical Pretexting

Red Team Social Engineering

An introduction to tactical pretexting for red team operations. Learn the fundamentals of crafting believable pretexts and executing social engineering engagements.