Publishing the Frontier
Our research team continuously explores offensive tradecraft, novel exploitation techniques, and defense evasion methods. Findings are responsibly disclosed and published.
Function Stomping & BOF Techniques for Modern C2 Frameworks
Deep-dive into creating reliable buffer overflow exploits for C2 implant deployment, including function stomping for stealthy code execution.
BYOVD and LSASS Looting in the Modern EDR Era
How Bring Your Own Vulnerable Driver techniques enable credential theft despite next-gen endpoint protection.
AI-Powered C2 Operations: LLMs as Attack Controllers
Exploring the feasibility of using local LLM inference engines as intelligent C2 operators for adaptive attacks.
CORS Misconfigurations & Local LLM Integration for RCE
Chaining CORS misconfigurations with local AI inference endpoints to achieve cross-origin remote code execution.
Outsmarting SmartScreen, MOTW, and AMSI with WebDAV
Bypassing Windows file reputation checks using WebDAV protocols to execute unsigned payloads.
Full Research Blog →
All publications, write-ups, and tooling are available on our research blog for the security community.
Collaborating on Research?
We're always open to collaborating with researchers and organizations on novel techniques and responsible disclosure.