LatestWEBNov 3, 2026/6 min read
Downgrading Trust: Bypassing HTTPS-Only SSRF Filters with a 302 Found
Exploring HTTPS to HTTP downgrades in Server-Side Request Forgeries to access internal endpoints and Cloud Metadata Services.
Read article
SilentForce Research
Offensive security research, from the front line.
Technical deep dives into offensive security, vulnerability research, and red team operations.
08 articles published
AI Red Teaming
Automating AI Red Teaming with Promptfoo
A hands-on look at automating AI Red Teaming with Promptfoo: covering setup, attack execution, and vulnerability discovery against a local chatbot.
Mar 19, 2026/18 min read
Evasion
Process Injection Tradecraft: Early Bird APC Queue Injection in Practice
Operational analysis of Early Bird APC Queue Injection, examining execution flow, detection surface, and practical considerations in Red Team engagements.
Mar 10, 2026/6 min read
AppSec
Mobile Application Pentesting in 2026: Technical Challenges in an Increasingly Closed Ecosystem
Mobile application pentesting has changed radically in recent years. In 2026, we are no longer just talking about finding obvious vulnerabilities in native applications, but about analyzing complex ecosystems where cross-platform frameworks, third-party SDKs, built-in anti-analysis protections, and increasingly restrictive operating systems converge.
Mar 3, 2026/6 min read
Evasion
Doppelganger — LSASS Cloning for EDR Evasion
Deep dive into Doppelganger, an advanced EDR evasion tool that clones LSASS, temporarily disables PPL, and performs in-memory dumps, helping to evade defenses.
Feb 24, 2026/12 min read
AI Red Teaming
AI Red Teaming: Jailbreaking LLMs — Taxonomy, Techniques and Practical Exploitation
A practical introduction to jailbreaking in AI models, exploring common typologies, attack techniques, and real-world examples to understand how to circumvent LLM restrictions.
Feb 18, 2026/14 min read
AI Red Teaming
AI Red Teaming: Introduction to Prompt Injection - Typologies, Techniques and Practical Examples
A practical introduction to prompt injection in AI red teaming, covering common typologies, attack techniques, and real-world examples to understand how LLMs can be manipulated.
Feb 12, 2026/14 min read
Vuln Analysis
(Not)React2Shell - Alternative payloads for RSC injection
A deep dive into the exploitation of the React2Shell vulnerability in scenarios where RCE is off the table.
Feb 12, 2026/6 min read