Red Team | jankesec

Red TeamNov 9, 20268 min read

Resilient Out-of-Band C2 Pipelines: Framing, AEAD Encryption, and Covert Channels in Go

Designing fault-tolerant, out-of-band command-and-control pipelines for authorized security testing: forward error correction via XOR parity, P-256 ECDHE session encryption, and 9 covert transport protocols in ghostlink.

#red-team#exploit-development#attack-paths#detection#methodology

Red TeamNov 9, 20268 min read

Kernel-Level Packet Sniffing with eBPF/XDP: Real-Time Credential Extraction and Exposure Auditing

How eBPF and XDP bypass userspace packet-capture bottlenecks to intercept authentication handshakes, NetNTLMv2 hashes, and cleartext credentials at line rate: architecture, protocol dissectors, and exposure auditing with driftnet2.

#linux-security#red-team#detection#attack-paths#methodology

PentestNov 6, 20267 min read

Skeleton Key: A Master Password for Every Account in the Domain

After Domain Admin, the game changes from getting in to staying in. The Skeleton Key patches the Domain Controller's KDC in memory so the single password 'mimikatz' unlocks every account — demonstrated live against KINGSLANDING, alongside the memory SSP and why DSRM does not apply in this lab.

#active-directory#pentest#red-team#identity-security#attack-paths