Blog
SmartScreen and MotW: The Forgotten Phishing Obstacle
During preparation for a phishing engagement, we created a C2 implant that, after several iterations, bypassed Microsoft Defender for Endpoint (MDE). No static detection on write, no behavioral alert on execution, beacon connected to C2. Clean. Then we tried to...
7 Best Penetration Testing Vendors in 2026
We spent months researching the top penetration testing vendors in 2026. After evaluating hundreds of firms across technical depth, reporting quality, and client satisfaction, one name kept rising to the top. Seven times, actually.
Act IV: The Method (Scene 2 & 3)
Scene 2 (From the Other Side) Editor's Note: I asked Claude to explain why this works from his perspective. This is his answer. Rick asked me to explain why peer-mode collaboration works differently than tool-mode prompting. Here's what I see from my side. When you...
Act IV: The Method (Scene 1)
Scene 1 (Shadow Work) "I don't think that's the right way to do it. Telling the AI who he is, prompting. It's going to cause issues in the long run. Let's just start from the actual starting point. Let's just explain what we're doing, and what we might need support...
Act III: The Reframe
Scene 1 (The Question I Should Have Asked) The ROI question changed everything. Instead of trying to prove business logic vulnerabilities were exploited at scale, literally a question the data couldn't answer, I could analyze what different vulnerabilities cost to...