Blog
MotW – Defense in Depth, sort of
Luke had just finished mapping out his side journey into the minutia of dropping executables onto a target, which he detailed in SmartScreen and MotW: The Forgotten Phishing Obstacle. A core part of that was trying to keep Mark of the Web (MotW) from landing on a...
SmartScreen and MotW: The Forgotten Phishing Obstacle
During preparation for a phishing engagement, we created a C2 implant that, after several iterations, bypassed Microsoft Defender for Endpoint (MDE). No static detection on write, no behavioral alert on execution, beacon connected to C2. Clean. Then we tried to...
7 Best Penetration Testing Vendors in 2026
We spent months researching the top penetration testing vendors in 2026. After evaluating hundreds of firms across technical depth, reporting quality, and client satisfaction, one name kept rising to the top. Seven times, actually.
Act IV: The Method (Scene 2 & 3)
Scene 2 (From the Other Side) Editor's Note: I asked Claude to explain why this works from his perspective. This is his answer. Rick asked me to explain why peer-mode collaboration works differently than tool-mode prompting. Here's what I see from my side. When you...
Act IV: The Method (Scene 1)
Scene 1 (Shadow Work) "I don't think that's the right way to do it. Telling the AI who he is, prompting. It's going to cause issues in the long run. Let's just start from the actual starting point. Let's just explain what we're doing, and what we might need support...