https://globetech.biz/blog/ Offensive security write-ups from GlobeTech LLC. en-us https://globetech.biz/blog/the-return-of-amsi-easy-dll-patching-without-c3/ https://globetech.biz/blog/the-return-of-amsi-easy-dll-patching-without-c3/ Mon, 16 Jun 2025 12:00:00 +0000 TL;DR For people that just want the slides and github link AMSI and ETW detections If you’ve been tapped into Defender (Home and / or Endpoint Product) since the end of Summer 2024, you’ve no doubt seen the newer AMSI and ETW patch detections. In fact, a lot of tooling has change https://globetech.biz/blog/unveiling-vulnerabilities-the-power-of-penetration-testing/ https://globetech.biz/blog/unveiling-vulnerabilities-the-power-of-penetration-testing/ Mon, 04 Sep 2023 12:00:00 +0000 Human prompt: “write an article for my penetration testing website” Human paragraph: I need content for my website, not just for you, but for me. See, I won’t get good Search Engine Optimization (SEO) results unless I have content on my site. But guess what? The content I write i https://globetech.biz/blog/fallacy-of-the-owasp-top-10/ https://globetech.biz/blog/fallacy-of-the-owasp-top-10/ Tue, 01 Aug 2023 12:00:00 +0000 The OWASP Top Ten is a widely recognized document that highlights the most critical security risks in web applications. It serves as a guide for developers, security professionals, and organizations to prioritize and address common vulnerabilities. Designed by the Open Web Applic https://globetech.biz/blog/dns-sinkholing-for-security/ https://globetech.biz/blog/dns-sinkholing-for-security/ Sat, 08 Jul 2023 12:00:00 +0000 The Power of DNS Sinkhole Devices: Exploring the Benefits of PiHole In today’s digital landscape, online security is a top concern for individuals and organizations alike. As cyber threats continue to evolve, implementing robust defense mechanisms becomes essential. One such tool https://globetech.biz/blog/evading-edr-by-dll-sideloading-in-csharp/ https://globetech.biz/blog/evading-edr-by-dll-sideloading-in-csharp/ Fri, 19 May 2023 12:00:00 +0000 The blog post accompanies my public conference talks on this topic. Slides are available at the bottom. One thing I learned from doing this talk is that a surprisingly high number of InfoSec professionals believe that bypassing EDR is not possible or is an exception. It should be https://globetech.biz/blog/osep-review-the-experienced-penetration-tester/ https://globetech.biz/blog/osep-review-the-experienced-penetration-tester/ Sat, 05 Jun 2021 12:00:00 +0000 What I’ll Cover What The Course Is How OSEP compares to OSCP Similarities and differences The Course Review Who I am, and who this is aimed for My study plan and time involved PDF videos, exercises and extra miles Final Materials “Walkthrough” of how to use the Challenge labs Cha https://globetech.biz/blog/spiceworld-virtual-2020-practical-hacking/ https://globetech.biz/blog/spiceworld-virtual-2020-practical-hacking/ Thu, 17 Sep 2020 12:00:00 +0000 Spiceworks Annual IT Conference ” https://www.spiceworks.com/spiceworld/ “ For the past few years, I’ve been going to SpiceWorld and took the opportunity this year to present. My session was focused around “practical hacking”, as in, the simple flaws that I’m going to search for https://globetech.biz/blog/red-team-windows-kits-cdb-exe/ https://globetech.biz/blog/red-team-windows-kits-cdb-exe/ Mon, 06 Jul 2020 12:00:00 +0000 Blog Preface – “Windows Kits” While running through some MITRE techniques, I happened upon the ADK tools and SDK tools and found a great collection of programs used for development, debugging, and administration. It just so happens, they’re also great for Red Teaming. Many of the https://globetech.biz/blog/red-team-windows-kits-adplus-exe/ https://globetech.biz/blog/red-team-windows-kits-adplus-exe/ Mon, 15 Jun 2020 12:00:00 +0000 Blog Preface – “Windows Kits” While running through some MITRE techniques, I happened upon the ADK tools and SDK tools and found a great collection of programs used for development, debugging, and administration. It just so happens, they’re also great for Red Teaming. Many of the https://globetech.biz/blog/oscp-review/ https://globetech.biz/blog/oscp-review/ Tue, 12 May 2020 12:00:00 +0000 This is a review of my OSCP experience. I registered in late 2018 and received my OSCP in May of 2019 with one exam attempt. This review is coming out in 2020. The Offensive Security Certified Professional is a golden standard in the CyberSecurity and Penetration Testing communit https://globetech.biz/blog/oswp-review/ https://globetech.biz/blog/oswp-review/ Sun, 26 Apr 2020 12:00:00 +0000 This is my review of the OSWP course material. I passed this certification in late 2019. The Offensive Security Wireless Professional is a certification course and exam that tests your knowledge around wireless penetration testing. Offensive Security is easily my favorite certifi