Covert Exfil from a Target Network

Provides an automated installer and configuration guide for Throwback, a beaconing backdoor with a PHP/MySQL C2 server, covering ThrowbackLP setup and agent deployment for red team use.

Describes embedding a Base64 Meterpreter payload in an Office VBA macro so a legitimate emailed document can be re-sent as a backdoor after harvesting domain credentials.

The FCC added foreign-made consumer routers to its Covered List over backdoor concerns: new models need Conditional Approval while a waiver protects existing devices until March 1, 2027.

Custom PowerShell modules and Python packages in Azure Automation Accounts can be backdoored for persistence. NetSPI demonstrates the attack and ships a tool to audit custom modules.

Dive into the secure code review process and learn about the necessary components needed to identify the risk your source code may pose to your organization.

Shares an infographic mapping common red team phishing attack workflows to blue team detective and preventative controls, plus practical stealth tips for both offensive operators and defenders.