Overview
Red teaming goes beyond traditional penetration testing to measure an organization’s detection and response capabilities. This section documents my methodologies, custom tools, and operational logs for realistic adversary simulations.
Core Capabilities
C2 Frameworks
Developing and customizing Command & Control (C2) agents, profile configurations (Malleable C2), and redirectors.
Explore C2Evasion & Tradecraft
Researching AV/EDR evasion, API unhooking, custom loaders, and obfuscation techniques to maintain access.
Explore TradecraftOperations
Anonymized operational logs and post-exploitation timelines covering complex corporate networks.
Explore OperationsOperational Methodology
1. External Reconnaissance & Initial Access
- OSINT (LinkedIn, GitHub, DNS, SPF/DKIM/DMARC)
- Custom Phishing campaigns with HTML smushing
- Exploitation of public-facing edge services
2. Evasion & Payload Delivery
- Shellcode compilation using custom Nim/Rust loaders
- Direct syscalls and API unhooking to bypass modern EDRs
- Code signing with self-signed / leaked certificates
3. Lateral Movement & Active Directory
- Kerberoasting, AS-REP Roasting, and BloodHound analysis
- Overpass-the-Hash and Pass-the-Ticket attacks
- Exploitation of AD CS (Active Directory Certificate Services)
4. Persistence & Exfiltration
- WMI Event Subscriptions and scheduled tasks
- DLL hijacking in legitimate system binaries
- Covert DNS and HTTPS channels for data exfiltration
Custom Offensive Tools
UAC Apex Framework (AEF) v4.0
Enterprise-grade adaptive UAC elevation framework for Windows — context-aware technique scoring, pre-flight risk assessment, retry/fallback orchestration, EDR/sandbox detection, and full cleanup pipeline.
DirtyClone Exploit Framework
CVE-2026-46331 — Linux kernel LPE via TC pedit + IPsec page-cache corruption. 8-stage automated attack chain with shellcode delivery, persistence, and cleanup modules.