PinnedInPosts By SpecterOps Team MembersbyWill Schroeder·Jun 17, 2021Certified Pre-OwnedActive Directory Certificate Services has a lot of attack potential!A response icon4A response icon4
InPosts By SpecterOps Team MembersbyWill Schroeder·Apr 25, 2024Nemesis 1.0.0In August of last year, @tifkin_, @0xdab0, and I released Nemesis, our offensive data enrichment platform. After lots of feedback…
InPosts By SpecterOps Team MembersbyWill Schroeder·Mar 13, 2024Summoning RAGnarok With Your NemesisWith the explosion of large language model (LLM) use, everyone is rushing to apply LLMs to their specific industry and it’s the same for…
InPosts By SpecterOps Team MembersbyWill Schroeder·Aug 9, 2023Hacking With Your NemesisIn the first post in this series, On (Structured) Data, we talked about the gap area of offensive structured data and ended with the…
InPosts By SpecterOps Team MembersbyWill Schroeder·Aug 2, 2023Challenges In Post-Exploitation WorkflowsIn our previous post, we talked about the problem of structured data in the post-exploitation community. We touched on the existing…
InPosts By SpecterOps Team MembersbyWill Schroeder·Jul 26, 2023On (Structured) DataIntroductionA response icon1A response icon1
InPosts By SpecterOps Team MembersbyWill Schroeder·Nov 9, 2022Certificates and Pwnage and Patches, Oh My!This post was written by Will Schroeder and Lee Christensen.A response icon3A response icon3
InPosts By SpecterOps Team MembersbyWill Schroeder·Jul 7, 2022Koh: The Token StealerEdit 07/13/22: After an awesome back and forth with Clément Notin and @SteveSyfuhs on Twitter on the effects of “TokenLeakDetectDelaySecs”…
InPosts By SpecterOps Team MembersbyWill Schroeder·Jun 1, 2022DeepPass — Finding Passwords With Deep LearningOne of the routine tasks operators regularly encounter on most engagements is data mining. While exactly what operators are after varies…A response icon2A response icon2
InPosts By SpecterOps Team MembersbyWill Schroeder·May 4, 2022Learning Machine Learning Part 3: Attacking Black Box ModelsIn the first post in this series we covered a brief background on machine learning, the Revoke-Obfuscation approach for detecting…A response icon2A response icon2
