Direct syscalls let malware bypass userland EDR hooks by calling the Windows kernel directly. Instead of going through the heavily hooked ntdll.dll stubs, the implant builds its own clean syscall stub (mov r10, rcx; mov eax, SSN; syscall; ret).
Direct syscalls let malware bypass userland EDR hooks by calling the Windows kernel directly. Instead of going through the heavily hooked ntdll.dll stubs, the implant builds its own clean syscall stub (mov r10, rcx; mov eax, SSN; syscall; ret).
Escape the container and compromise the Node. In Part Two, we exploit Docker socket misconfigurations to gain root access and demonstrate real-world container breakout techniques.
Discover how Ligolo-ng enables stealthy, agent-based tunneling for efficient pivoting across segmented networks in real-world red team operations.
Discover how real adversaries target Kubernetes clusters. Learn key components, attack surfaces, and how manual testing reveals hidden risks..
Manual techniques exposed critical flaws in AD & Azure AD. This real-world test proved how threat actors pivot from on-prem to complete M365 takeover.
The Art of Tunneling Part 3 explores advanced SSH tunneling in action through real pentest scenarios, leveraging GatewayPorts to bypass network segmentation and enable secure collaboration between multiple systems.
The Art of Tunneling Part 2 delves into advanced techniques, showcasing real-world scenarios to bypass segmentation and evade detection, enhancing your pentesting toolkit.
Tunneling is a vital skill in penetration testing, enabling access to restricted networks and bypassing barriers. The Art of Tunneling Part 1 introduces the basics, laying the foundation for mastering this essential technique.
This blog explores rising cybersecurity risks in manufacturing and how RBT Security’s services, like penetration testing and ransomware readiness, safeguard against them.
By embedding security into your code from the very beginning, one can help ensure that the organization remains resilient against potential cyber threats.
Escape the container and compromise the Node. In Part Two, we exploit Docker socket misconfigurations to gain root access and demonstrate real-world container breakout techniques.
Discover how Ligolo-ng enables stealthy, agent-based tunneling for efficient pivoting across segmented networks in real-world red team operations.
Discover how real adversaries target Kubernetes clusters. Learn key components, attack surfaces, and how manual testing reveals hidden risks..
Manual techniques exposed critical flaws in AD & Azure AD. This real-world test proved how threat actors pivot from on-prem to complete M365 takeover.
The Art of Tunneling Part 3 explores advanced SSH tunneling in action through real pentest scenarios, leveraging GatewayPorts to bypass network segmentation and enable secure collaboration between multiple systems.
The Art of Tunneling Part 2 delves into advanced techniques, showcasing real-world scenarios to bypass segmentation and evade detection, enhancing your pentesting toolkit.
Tunneling is a vital skill in penetration testing, enabling access to restricted networks and bypassing barriers. The Art of Tunneling Part 1 introduces the basics, laying the foundation for mastering this essential technique.
This blog explores rising cybersecurity risks in manufacturing and how RBT Security’s services, like penetration testing and ransomware readiness, safeguard against them.
By embedding security into your code from the very beginning, one can help ensure that the organization remains resilient against potential cyber threats.
