by Jason Downey This is Dig Dug. A Red Siege tool for avoiding av/edr can offer valuable solutions for penetration testers and red teamers. If you spend any amount of […]
The post DigDug: Making Your Payload Too Big to Scan appeared first on Red Siege Information Security.
by Stuart Rorer Most weeks, the tests I run are fairly routine: web applications, externals, and internals with a tight scope. But mobile application assessments have a way of getting […]
The post Trust, But Verify: What Clients Should Know Before a Mobile Application Assessment appeared first on Red Siege Information Security.
by Mike Saunders The AWS ReadOnlyAccess policy might be providing more access than you’re intending to grant. On a recent assessment, we observed widespread use of IAM roles with the […]
The post This is not the Access Policy you’re looking for appeared first on Red Siege Information Security.
As proud sponsors of Wild West Hackin’ Fest, Red Siege is heading back to Deadwood! WWHF is always a big one for us, and this year we’re bringing training, talks, […]
The post Red Siege at Wild West Hackin’ Fest Deadwood 2026: What to Expect appeared first on Red Siege Information Security.
by Justin Palk A couple of years ago, I put together a series on standing up a simple Windows AD domain in a lab environment. This article is part of […]
The post Improving Your Simple Windows Domain for Offensive Testing: Installing MS SQL Server Express on Windows Server 2022 Server Core Edition appeared first on Red Siege Information Security.
by Justin Palk A couple of years ago, I put together a series on standing up a simple Windows AD domain in a lab environment. This article is part of […]
The post Improving Your Simple Windows Domain for Offensive Testing: Sysmon appeared first on Red Siege Information Security.
by Justin Palk A couple of years ago, I put together a series on standing up a simple Windows AD domain in a lab environment. This is the start of […]
The post Improving Your Simple Windows Domain for Offensive Testing: Elastic Defend EDR appeared first on Red Siege Information Security.
EDD: PowerView’s .NET Cousin By Jason Downey If you’ve done any Active Directory enumeration, you’ve probably used PowerView. It for a bunch of years was the gold standard, so much […]
The post Enumerate Domain Data (EDD): Powerview’s .NET Cousin appeared first on Red Siege Information Security.
by Ian Briley Sometimes an older trick is the only trick that will work for you on an engagement. Case in point, recently I was on an engagement, where if […]
The post When All Else Fails: PowerShell Reflective Assembly Loading appeared first on Red Siege Information Security.
by Jason Downey EyeWitness: Because Nobody Has Time to Visit 500 URLs Every pentest has that moment during recon where you’ve got a list of web servers a mile long […]
The post Tool – EyeWitness appeared first on Red Siege Information Security.
