on development, hacking, pentest, redteam, stacktitan, mobsec, mobile

Android vs. The Terminator

We had a little bit of downtime and played a CTF at Kernelcon 24. Did pretty well and started writing up some of the challenges. This is one pertaining to Android.…

on adversary, pentest, social engineering, stacktitan, security, redteam, physec, rift

Practical Physical Exploitation Course Review

"The Practical Physical Exploitation course is well worth the time, money, and effort. The instructors have built an excellent offering that is a true 'zero to hero' style course that not only new pentesters, but seasoned professionals would both gain value from attending."…

on adversary, telephony, VoIP, hacking, pentest, redteam, security, stacktitan, rift, social engineering

SE: Build a Caller ID Spoofing Rig

Telephone Caller ID (CID) is often abused to manipulate the recipient's trust. Come explore the technology as STACKTITAN's Alex Sander's demonstrates building a CID spoofing rig.…

on adversary, pentest, redteam, rift, stacktitan, security

SMBExec: Red Side Analysis (Part 2)

STACKTITAN's Alex Mason is back with part II in this tradecraft series. This time around he demonstrates modifying SMBExec to bypass various detections.…

on adversary, pentest, redteam, rift, stacktitan

SMBExec: Red Side Analysis (Part 1)

Ride along as Alex Mason from STACKTITAN shares tradecraft of analyzing offensive toolchains to identify detection opportunities in part one of this blog series.…