10 Evil User Tricks for Bypassing Anti-Virus

Walks through packaging Metasploit payloads into Windows MSI files with msfvenom, since many antivirus products don't scan .msi files or their .tmp files by default.

BOFScale runs a patched Tailscale daemon as a BOF-PE inside the implant, relaying C2 over standard WebSockets so DERP and control-plane traffic blends in behind CDNs like CloudFront and Fastly.

Discover how NetSPI's Azure & AWS Configuration Reviews provide continuous visibility, risk identification, and actionable insights to secure your cloud environments.

NetSPI demonstrates obfuscating HTML smuggling with Web Assembly, embedding payloads in Wasm so files reassemble victim-side and evade network detections that flag suspicious outbound file downloads.

NetSPI launches SaaS Security Assessments for Salesforce and Microsoft 365, pairing automated and manual testing against CIS Benchmarks to uncover misconfigurations in an often-overlooked surface.

How Contributor access lets attackers retrieve Azure App Configuration access keys and dump key-value pairs that often hide secrets; read-write keys even enable tampering attacks.