Detection | jankesec

Red TeamNov 9, 20268 min read

Resilient Out-of-Band C2 Pipelines: Framing, AEAD Encryption, and Covert Channels in Go

Designing fault-tolerant, out-of-band command-and-control pipelines for authorized security testing: forward error correction via XOR parity, P-256 ECDHE session encryption, and 9 covert transport protocols in ghostlink.

#red-team#exploit-development#attack-paths#detection#methodology

Red TeamNov 9, 20268 min read

Kernel-Level Packet Sniffing with eBPF/XDP: Real-Time Credential Extraction and Exposure Auditing

How eBPF and XDP bypass userspace packet-capture bottlenecks to intercept authentication handshakes, NetNTLMv2 hashes, and cleartext credentials at line rate: architecture, protocol dissectors, and exposure auditing with driftnet2.

#linux-security#red-team#detection#attack-paths#methodology

macOS SecurityNov 9, 20269 min read

macOS Hardening in Practice: Auditing 54 Controls, Detecting Drift, and Remediating Without Dependencies

A deep dive into macOS endpoint security architecture: auditing SIP, Gatekeeper, TCC, LaunchDaemons, BPF packet filters, and plaintext secret leakage using native Zsh primitives, zero third-party dependencies, and OASIS SARIF v2.1.0.

#macos-security#apple-security#methodology#privilege-escalation#detection