Recent post
28 Feb 2026

Defeating Windows DEP Using ROP Chains Leveraging VirtualAlloc

A Practical Walkthrough of Bypassing Windows Data Execution Prevention with Return‑Oriented Programming Leveraging VirtualAlloc

15 Jan 2025

Autonomous Lateral Movement in Red Team Operations

Autonomous lateral movement allows Red Teams to navigate networks, simulate attacks, and uncover hidden vulnerabilities efficiently, helping defenders strengthen detection and response strategies.

20 Jan 2024

Attack, Detection, and Reversal of a Stageless Havoc Implant

This post explores the offensive and defensive aspects of stageless Havoc implants, covering how they are deployed, detected, and mitigated in modern cybersecurity environments.

21 Oct 2021

Evasion Techniques and Breaching Defenses

PEN-300 is OffSec’s advanced penetration testing course, focused on evading defenses, developing custom techniques, and preparing for the OSEP exam

20 May 2020

Stop Calling It a Red Teaming

There are still many gaps in the security industry when it comes to defining Vulnerability Assessment (VA), Penetration Testing, and Red Teaming. Interestingly, some people think a Pentest is the **same** as Red Teaming.