
Penetration Testing, Purple Team, Red Team & Adversary Emulation, Security Posture Review and Training Let our Offense, Prepare your Defense. #weareoffensive
Worldwide
Joined September 2017
- Tweets3.7K
- Following1.2K
- Followers10.1K
- Likes3.2K
Offense for Defense is now On-Demand: Brought to you by CEO @TimMedin and Security Consultant Jason Downey 🔗 training.redsiege.com
Your Lab, On Your Time
0️⃣ Zero setup. Total control.
🏰 Built for defenders who want to think like attackers
Caffeine. Command Lines. Credentials. Just another Morning Routine. ☕🎶
youtu.be/ZcIHDuM2rEo?si=lt18…
Modern AV and EDR know what common shellcode looks like. Time to make detection harder.
In Modern Shellcode Obfuscation, Mike Saunders covers practical techniques for concealing payloads through 16 hands-on, browser-based labs.
Available on-demand! redsiege.com/modsho
A new edition of the SiegeStack is dropping soon!
Your monthly collection of all things offensive, threat trends, insights, and Red Siege updates.
Subscribe now and stay ahead of the latest in cybersecurity
🔗 redsiege.com/signup
#hacking #infosec #cybersecurity
Huge thanks to Andy Pettit for joining us on the WedOff and walking us through xdr-cli, showing off its capabilities, and digging into some of the ways attackers could abuse Microsoft Defender's Live Response feature!
See y'all next week!
Did someone say tricks, treats, and attack techniques?
It's Wednesday! And on today's WedOff we've got Andy Pettit talkin about his new xdr-cli tool and some attacker uses of Microsoft Defender.
See you at 130pm ET 🔗 redsiege.com/wedoff 🥸🎃👻
Your next cybersecurity training doesn't have to wait for the next conference.
⚔️ Offense for Defense
⚔️ Penetration Testing: Beyond the Basics
⚔️ Modern Shellcode Obfuscation
Real-world skills. Hands-on training. On your schedule. On-demand.
🔗 training.redsiege.com
Friendly neighborhood reminder!
Tomorrow on The Wednesday Offensive we'll have Andy Pettit leading the discussion on his new xdr-cli tool and some of the attacker uses of Microsoft Defender.
Join the conversation at 130pm ET 🔗 redsiege.com/wedoff 👻🎃🥸
PHP2Shell is officially being exploited in the wild. Researchers confirmed successful remote code execution through two critical PHP vulnerabilities, with emergency patches now available.
via @BleepinComputer
🔗 bleepingcomputer.com/news/se…
Here's what we've got coming up this week!
Join us for The Wednesday Offensive, every Wednesday at 130pm ET. This week Andy Pettit will be talking about his xdr-cli tool released at WWHF and some of the attacker uses of Microsoft Defender.
🔗 redsiege.com/wedoff
Think Content Security Policies are just another security header?
Listen in as Red Siege Security Consultants Douglas and Stuart discuss Cross-Site Scripting (XSS), and hear Douglas explain why CSPs are far more powerful than most people realize.
For years this will be a case study on internal phishing gone wrong.
I’d bet they weren’t going to give rings, but because of this mess up, they have to (good?).
Tests like this gauge the effectiveness of the ruse, not the effectiveness of the staff. See my @WWHackinFest talk.
MSG employees thought they were getting a Knicks championship ring. They got cybersecurity training instead 🤨
A dummy email from the Knicks with two ring options was sent to employees, but clicking on a selection resulted in receiving a mandatory course on how to avoid phishing scams, per @TheAthletic.
Huge thanks to Brian Halbach for joining the WedOff to talk about life on both sides of cybersecurity consulting, vulnerability management, and the challenges of getting security findings fixed.
See y'all next week! ⚔️
🔗 redsiege.com/wedoff
It's time for the 2nd Best Show on the Internet: The Wednesday Offensive!
Today we have Brian Halbach talkin about vulnerability management, its connection to offensive security, and the challenges of keeping up with an endless flood of CVEs.
See you at 130pm ET 🔗👇
Friendly Neighborhood Reminder!
Tomorrow on The WedOff, Brian Halbach joins us to talk vulnerability management, offensive security, and the never-ending flood of CVEs.
Join us at 130pmET 🔗 redsiege.com/wedoff
Senior Security Consultant Justin Palk expands on his original Windows AD lab series with new capabilities designed to make your lab more realistic and versatile.
The first installment shows you how to deploy Elastic Defend EDR 🔗 redsiege.com/elastic-defend
ConnectWise suspends Cloud Backup and other services after attackers compromise app identities to access Microsoft 365 tenants. Backups and restores remain unavailable.
via @TheHackersNews
thehackernews.com/2026/10/co…










