Tagged articles

Cobalt Strike

3 articles · Page 1 of 1

Aug 6, 2026 · Information Security

Vipere: One-Click Hijack of Visual Studio Installer Service for Stable SYSTEM Privilege Escalation

Vipere, a BOF module for Cobalt Strike, hijacks the Visual Studio Installer Elevation Service to achieve SYSTEM‑level privilege escalation and persistence without modifying any signed binaries, leveraging lax SDDL permissions, unchecked .NET CLR configuration, and orphaned service registry entries, while evading EDR detection.

BOFCobalt StrikeDetection

0 likes · 7 min read

Vipere: One-Click Hijack of Visual Studio Installer Service for Stable SYSTEM Privilege Escalation

Black & White Path

Jun 22, 2026 · Information Security

How DNSStager Hides Malware in DNS Queries for Stealthy Penetration Testing

DNSStager is an open‑source tool that encodes, splits, and embeds payloads into DNS AAAA or TXT records, uses a fake DNS server to deliver the chunks, reassembles them on the target, and injects the shellcode directly into memory, enabling covert malware delivery when only DNS traffic is allowed.

Cobalt StrikeDNSMemory Injection

0 likes · 10 min read

How DNSStager Hides Malware in DNS Queries for Stealthy Penetration Testing

Black & White Path

Apr 1, 2026 · Information Security

Red Team Walkthrough: Compromising a Tiny Company with Phishing and Local Exploits

This article details a red‑team engagement against a 30‑employee company that lacked a public website, describing how the team used phishing emails, custom Cobalt Strike payloads, shellcode encryption, internal network scanning, and a router tunnel to obtain footholds and extract data.

Cobalt StrikeRouter ExploitationShellcode Encryption

0 likes · 5 min read

Red Team Walkthrough: Compromising a Tiny Company with Phishing and Local Exploits