Bypassing Anti-Virus with Metasploit MSI Files

Lists ten weak antivirus configurations that let ordinary users run malware unmodified, from user-added policy exceptions to executing from UNC paths, alternate data streams, or DLLs.

BOFScale runs a patched Tailscale daemon as a BOF-PE inside the implant, relaying C2 over standard WebSockets so DERP and control-plane traffic blends in behind CDNs like CloudFront and Fastly.

NetSPI demonstrates obfuscating HTML smuggling with Web Assembly, embedding payloads in Wasm so files reassemble victim-side and evade network detections that flag suspicious outbound file downloads.

NetSPI surveyed its 300-plus pentesters to rank twelve must-have offensive security tools, including Burp Suite, NMAP, CrackMapExec, Metasploit, BloodHound and Impacket, with commentary on each.

NetSPI releases Dockerized Linux hacking labs: vulnerable images with a Metasploit attacker container let learners safely practice exploiting misconfigured services like Rsync.

Will Pearce shows that nulling the first bytes of a docm file lets spam filters deliver it despite block rules; Word's repair restores the file and the embedded macro still executes.