/BLOG

Technical deep dives into offensive security, vulnerability research, and red team operations.

#AI Red Teaming
Mar 19, 2026·18 min read

View ArticleAutomating AI Red Teaming with Promptfoo

A hands-on look at automating AI Red Teaming with Promptfoo: covering setup, attack execution, and vulnerability discovery against a local chatbot.

#Offensive#llm#llm security#promptfoo
read →
#Evasion
Mar 10, 2026·6 min read

View ArticleProcess Injection Tradecraft: Early Bird APC Queue Injection in Practice

Operational analysis of Early Bird APC Queue Injection, examining execution flow, detection surface, and practical considerations in Red Team engagements.

#Red Team#Offensive#Process Injection#Windows
read →
#AppSec
Mar 3, 2026·6 min read

View ArticleMobile Application Pentesting in 2026: Technical Challenges in an Increasingly Closed Ecosystem

Mobile application pentesting has changed radically in recent years. In 2026, we are no longer just talking about finding obvious vulnerabilities in native applications, but about analyzing complex ecosystems where cross-platform frameworks, third-party SDKs, built-in anti-analysis protections, and increasingly restrictive operating systems converge.

#Research#Offensive#Mobile Security
read →
#Evasion
Feb 24, 2026·12 min read

View ArticleDoppelganger — LSASS Cloning for EDR Evasion

Deep dive into Doppelganger, an advanced EDR evasion tool that clones LSASS, temporarily disables PPL, and performs in-memory dumps, helping to evade defenses.

#Research#tool#lsass#Offensive
read →
#AI Red Teaming
Feb 18, 2026·14 min read

View ArticleAI Red Teaming: Jailbreaking LLMs — Taxonomy, Techniques and Practical Exploitation

A practical introduction to jailbreaking in AI models, exploring common typologies, attack techniques, and real-world examples to understand how to circumvent LLM restrictions.

#Offensive#Research#jailbreaking#llm
read →
#AI Red Teaming
Feb 12, 2026·14 min read

View ArticleAI Red Teaming: Introduction to Prompt Injection - Typologies, Techniques and Practical Examples

A practical introduction to prompt injection in AI red teaming, covering common typologies, attack techniques, and real-world examples to understand how LLMs can be manipulated.

#Offensive#Research#prompt-injection#llm
read →
#Vuln Analysis
Feb 12, 2026·6 min read

View Article(Not)React2Shell - Alternative payloads for RSC injection

A deep dive into the exploitation of the React2Shell vulnerability in scenarios where RCE is off the table.

#Offensive#Next.js#PoC
read →