Skip to content

Red Team

4 articles, newest first.

4 articles filed under Red Team, written by the Egnworks crew and collected on one page, newest first.

A Red Team visualization of one compromised Windows cluster node exposing every connected node and virtual identity.

Red Team

Own One Node, Own the Cluster

A Red Team analysis of how WSFC identities, RBCD, shared secrets, and BloodHound paths turn one compromised node into cluster-wide control.

Jacob Strix

A Red Team banner depicting two Active Directory identities converging inside a Kerberos authentication path.

Red Team

ResetNightmare: When a Writable UPN Becomes Domain Admin

A technical Red Team analysis of ResetNightmare, where writable UPN attributes, Kerberos name confusion, and kpasswd can create a domain takeover path.

Jacob Strix

A dark computer terminal shows code during analysis of a Windows kernel driver.

Red Team

BTR Reforged Turns Defender Against Itself

BTR Reforged repurposes Defender's signed remediation driver as a controlled Ring 0 file and registry operation primitive.

Jacob Strix

A close-up technology photograph used for an embedded red-team firmware banner.

Red Team

Flipper Firmware on the T-Embed CC1101 Plus

A technical assessment of Sor3nt's Flipper Zero ESP32 port running from main on the LilyGo T-Embed CC1101 Plus.

Jacob Strix