Jeff Dimmock

Pentester and Red Teamer | @bluscreenofjeff | bluescreenofjeff.com

4 Following 169 Followers

Stories in

Posts By SpecterOps Team Members

Designing Effective Covert Red Team Attack Infrastructure

Jeff Dimmock in Posts By SpecterOps Team Members

Oct 2

F’Awk Yeah! Advanced sed and awk Usage (Parsing for Pentesters 3)

Jeff Dimmock in Posts By SpecterOps Team Members

Aug 29

Randomized Malleable C2 Profiles Made Easy

Malleable Command and Control (C2) profiles provide red teamers and penetration testers with a wealth of options to modify how Cobalt Strike both appears on the wire and on the compromised host. Malleable C2 can be used to impersonate actual threat actors…

Jeff Dimmock in Posts By SpecterOps Team Members

Aug 7

Attack Infrastructure Log Aggregation and Monitoring

Jeff Dimmock in Posts By SpecterOps Team Members

Jun 12

Serving Random Payloads with Apache mod_rewrite

As testers, we sometimes need some good, old-fashioned trial and error to get things working. Phishing is one of the attacks that commonly takes more than one attempt to get payloads and command and control (C2) working properly. This post covers…

Jeff Dimmock in Posts By SpecterOps Team Members

May 22

How To Pass the Ticket Through SSH Tunnels

The Pass the Ticket (PtT) attack method uses a Kerberos ticket in place of a plaintext password or NTLM hash. Probably the most common uses of PtT are using Golden and Silver Tickets. Gaining access to a host via PtT is fairly straightforward; however…