#redteaming

New blog post! I recently got to use both of the tools I published on Codeberg (Axmar and Tessera) during an engagement, and so I decided to make a brief writeup as a case study of what these tools can do. https://ti-kallisti.com/tales/schedule.html #infosec #pentesting #redteam #redteaming #Microsoft #ActiveDirectory #MSSQL

Less than a week til #BlackHat2026! 🎲 We're excited to host RED Team Essentials: Foundations of Command and Control (C2) on August 3rd! Last-minute registration is still open! Hope to see you there! 🔗: https://buff.ly/4APHjbZ #BlackHat #InfoSec #RedTeaming

The recording and slides for our Hacker Summer 2026 webinar, From Initial Access to Persistence: Abusing Synced Passkeys in Azure, are now available. Video: https://youtu.be/kwEga-U96dw?si=_nwzT74aT26cNpAx Slides: https://16cdd728-52b5-4665-b161-30113ba1b7e4.usrfiles.com/ugd/16cdd7_684bf5951d5648f0a213cf3a3836505f.pdf Special thanks to @nathanmcnulty@bird.makeup for an excellent session. #HackerSummer2026 #CloudSecurity #RedTeaming #AlteredSecurity

New blog post! This time I talk about my new favorite evasive shellcode loader, Charon. I give a brief overview about what it does, how it works and which techniques it uses. Also a brief addendum for enjoyers of bloated Implants such as Sliver. https://ti-kallisti.com/general/ms/descending-into-hades.html #InfoSec #Malware #Shellcode #RedTeam #RedTeaming #Pentesting #Charon #Sliver #Merlin #Mythic

New blog post! I recently completed the OffSec Expert Penetration Tester (OSEP) certificate. Here are my thoughts on it: https://ti-kallisti.com/certs/osep.html #InfoSec #RedTeam #RedTeaming #EDR #Offsec #Metasploit

So, one of my resolutions this year was to write more code. I love to break stuff, but last year I reignited my passion for coding and I would really love to contribute to the community that has given me so much and continues to do so. And contributing works a lot better by creating, rather than breaking. So I created a codeberg account. And I already have a first repo published! I called it Axmar. Axmar is a C# implementation of the SilentHarvest technique that was published last year. It uses backup access and rarely used APIs to (mostly) stealthily read the local credentials database in Windows system. Enjoy! https://codeberg.org/Ti-Kallisti/Axmar #foss #coding #infosec #malware #pentesting #redteaming #codeberg #windows #csharp