Tagged articles

defense evasion

4 articles · Page 1 of 1

Jul 25, 2026 · Information Security

Deep Dive into wp2shell: A Cross‑Platform RAT Attack Platform

Security researchers monitoring an open directory uncovered the full wp2shell platform, a cross‑platform Go RAT supporting 14 CPU architectures that combines a zero‑credential WordPress exploit chain with large‑scale IoT botnet deployments against Ubiquiti, D‑Link and Totolink devices, featuring fileless execution, post‑quantum TLS, and extensive persistence mechanisms.

IoT botnetMITRE ATT&CKRAT

0 likes · 32 min read

Deep Dive into wp2shell: A Cross‑Platform RAT Attack Platform

Black & White Path

Apr 11, 2026 · Information Security

Inside the Exposed TheGentlemen Ransomware Toolkit on Proton66

In March 2026 Hunt.io researchers uncovered an open directory on the Russian bullet‑proof host Proton66 that contains the full TheGentlemen ransomware toolkit, complete with Mimikatz credential logs, ngrok tokens, and 21 MITRE ATT&CK techniques, providing a detailed view of the attackers' reconnaissance, privilege‑escalation, defense‑evasion, credential‑access, persistence, and encryption‑preparation stages.

Credential DumpingMITRE ATT&CKMimikatz

0 likes · 22 min read

Inside the Exposed TheGentlemen Ransomware Toolkit on Proton66

Black & White Path

Mar 17, 2026 · Information Security

Red Team Playbook: From External Breach to Internal Network Domination

This guide walks through the full red‑team workflow—from reconnaissance and initial access through defense evasion, credential theft, lateral movement, and operational security—detailing concrete tools, commands, and techniques for compromising both external and internal networks.

Credential DumpingLateral MovementOPSEC

0 likes · 10 min read

Red Team Playbook: From External Breach to Internal Network Domination

Black & White Path

Feb 22, 2026 · Information Security

30 Practical Web Penetration Testing Techniques You Must Know

This guide walks through 30 hands‑on web penetration testing techniques covering the full workflow—from information gathering and vulnerability discovery to privilege escalation, internal network pivoting, and defense evasion—providing concrete commands, tool recommendations, and real‑world tips for security engineers and testers.

Penetration TestingPrivilege EscalationSecurity tools

0 likes · 26 min read

30 Practical Web Penetration Testing Techniques You Must Know