Sign in Subscribe

Dahvid Schloss

EC Playbook

EC Playbook

EC Playbook is a quick-reference knowledge base for offensive security practitioners. It is designed to surface concise, high-signal guidance that supports field work, training, and daily operations. The content is intentionally compact, consistent, and searchable so users can find the right command, concept, or workflow quickly. Built by Emulated Criminals

SilentFrame: A Research POC on Post-Exploitation Credential Collection through Browsers

SilentFrame: A Research POC on Post-Exploitation Credential Collection through Browsers

This article is in reference to our newest POC hosted on GitHub here: https://github.com/Emulated-Criminals/SilentFrame For the last two weeks, the team and I have been working on a project we are calling Playbook, which is a quick-reference cheat sheet website to help fellow offensive security professionals

Seeing Everything, Understanding Nothing

Seeing Everything, Understanding Nothing

To help you get a head start on making your environment safer and in keeping with the theme of January’s “New Year, New Priorities,” we thought it appropriate to discuss the second most common issue we see in organizations, prioritizing threats. Before we dive into it, I want you

New Year, New Priorities - So, what to fix first?

New Year, New Priorities - So, what to fix first?

The most common phrase we hear from our prospects is, “We are overwhelmed, and we aren’t sure what to tackle first.” It’s a tale as old as time when you work in security. Ultimately, everything is reported to the defensive team and executives as critical issues, and everything

UnderByte — A Ransomware experiment using Alternate Data Streams (ADS)

UnderByte — A Ransomware experiment using Alternate Data Streams (ADS)

Repository purpose: this research was to evaluate the feasiabilty of using Alternate Data Stream (ADS) in staging and conducting ransomware-esk behaviors and examines how well common endpoint controls detect or block those behaviors. This repo is explicitly not intended to provide operational guidance, tools, or techniques for malicious use. Important: