1.Bypassing EDR with Local AIblog | 2026-09-24 02:34 | projectblack.io | Original ↗ | .md | #ai-security | #windows | #penetration-testing
2.BYOVD to the next level (part 2) — rootkit like it's 2025research | 2025-10-08 22:00 | blog.quarkslab.com | Original ↗ | .md | #windows | #post-exploitation | #kernel
3.When too much access is not enough: a story about Confluence and tokensresearch | 2025-07-02 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #aws | #red-team
4.Defending Against Cable: Prevent Malicious Use of Post-Exploitation Toolblog | 2025-05-06 14:00 | semperis.com | Original ↗ | .md | #threat-detection | #active-directory | #post-exploitation
5.suForce: Linux Local Account Password Brute-Forcing Tool via 'su'tool | 2025-03-24 09:22 | github.com | Original ↗ | .md | #linux | #red-team | #post-exploitation
6.Tracking Pyramid C2: Identifying Post-Exploitation Servers in Huntblog | 2025-02-12 00:00 | hunt.io | Original ↗ | .md | #python | #c2 | #post-exploitation
7.Post-Exploitation: Abusing the KeePass Plugin Cacheresearch | 2023-02-06 23:00 | blog.quarkslab.com | Original ↗ | .md | #windows | #exploitation | #post-exploitation
8.9 Post-Exploitation Tools for Your Next Penetration Testblog | 2021-07-15 00:00 | bishopfox.com | Original ↗ | .md | #pentesting | #active-directory | #post-exploitation
9.In-the-Wild Series: Android Post-Exploitationresearch | 2021-01-12 00:00 | projectzero.google | Original ↗ | .md | #android | #post-exploitation | #project-zero
10.BC Security's Empire/Starkiller & Kali Linuxblog | 2021-01-12 00:00 | kali.org | Original ↗ | .md | #c2 | #kali-linux | #empire
11.Tokenvator: Release 2blog | 2018-09-27 00:00 | netspi.com | Original ↗ | .md | #privilege-escalation | #windows | #red-team
12.Introducing SharpSploit: A C# Post-Exploitation Libraryresearch | 2018-09-20 07:00 | specterops.io | Original ↗ | .md | #post-exploitation | #csharp | #specterops
13.Kali Linux 2017.2 Releaseblog | 2017-09-20 00:00 | kali.org | Original ↗ | .md | #active-directory | #osint | #bloodhound
14.Expanding the Empire with SQLblog | 2017-05-09 00:00 | netspi.com | Original ↗ | .md | #c2 | #empire | #post-exploitation
15.Getting Started with WMI Weaponization – Part 3blog | 2017-04-11 00:00 | netspi.com | Original ↗ | .md | #windows | #wmi | #post-exploitation
16.Decrypting MSSQL Credential Passwordsblog | 2015-01-26 00:00 | netspi.com | Original ↗ | .md | #powershell | #post-exploitation | #mssql
17.15 Ways to Download a Fileblog | 2014-06-16 00:00 | netspi.com | Original ↗ | .md | #pentesting | #windows | #powershell
18.Using strace to monitor SSH connections on Linuxblog | 2014-04-07 00:00 | netspi.com | Original ↗ | .md | #linux | #ssh | #post-exploitation
19.Decrypting MSSQL Database Link Server Passwordsblog | 2014-03-05 00:00 | netspi.com | Original ↗ | .md | #powershell | #post-exploitation | #database-security
20.SQL Server Local Authorization Bypass MSF Modulesblog | 2012-11-20 00:00 | netspi.com | Original ↗ | .md | #privilege-escalation | #post-exploitation | #metasploit