PracSec

Lead developer of SpecterInsight and owner of Practical Security Analytics LLC.

[PracSec @prac_sec]

New blog post: Dumping LSASS Without Touching Disk

Improved LSASS dumping in SpecterInsight’s dumper module, focusing on stealthy, in-memory techniques.

Read it here:

https://t.co/iyhUNU9fP8

#RedTeam #CyberSecurity #WindowsInternals #ThreatEmulation

[PracSec @prac_sec]

SpecterInsight v6.0.0 is live! Inveigh workflows, local and remote exploit integration, native Zig payloads with source code obfuscation, network intelligence, and SSL C2 to enhance your threat emulation activities.

https://t.co/LuwKxolcYj

[PracSec @prac_sec]

SpecterInsight 5.1.0 is out!!! AI agent ops, full Kerberos attack library, 8-technique LSASS dumping, Early Cascade Injection, WFP EDR blocking, Ghost Task persistence & more.

https://t.co/SCsDc2RCH0

[PracSec @prac_sec]

Just released SpecterInsight v5.0.0! This version delivers a detailed operational event log, user experience improvements, and stability/bug fixes. Check out the full details here!

https://t.co/jNdlJNszjD

[PracSec @prac_sec]

Checkout this post on lateral movement with WinRM.

https://t.co/rDEoxDqB9O

[PracSec @prac_sec]

SpecterInsight 4.4.0 just released! This version provides a new module for lateral movement and EDR silencer techniques via Group Policy, a Firewall module, and 7 new SpecterScripts.

https://t.co/I009HBGWgz

[PracSec @prac_sec]

SpecterInsight version 4.3.0 is chocked full of bug fixes, new payload pipelines, and a new hardware breakpoint AMSI bypass. Check it out!

https://t.co/mDMvyvMJyN

[PracSec @prac_sec]

Check out this post on selecting bypasses and applying tailored obfuscation to evade AV.

Please let me know if you find this post helpful. Let me know if there’s anything I can do to improve SpecterInsight!

https://t.co/wTTeS8vkB3

[PracSec @prac_sec]

SpecterInsight v4.2.0 has been released!

We’ve packed a bunch of improvements to our PowerShell obfuscation and payload pipeline features. Check out the release notes here:

https://t.co/rLMBAiEO1y

[PracSec @prac_sec]

In this post, I demonstrate how to use SpecterInsight to create a payload pipeline to evade AV detection and application controls.

https://t.co/nYsEca66T7

[PracSec @prac_sec]

Check out the new release of SpecterInsight v4.1.0! There are now payload pipelines for LNK files, MSBuild XML files, and InstalUtil.exe compatible exe.

https://t.co/7lD3HodnhN

[PracSec @prac_sec]

I’m moving over to Bluesky! Head over there today to check out my new AMSI bypass technique and details on the release of SpecterInsight 4.0.0: Direct System Call Module, Process Injection, and New AMSI Bypass.

https://t.co/PmIHb5DaQY

[PracSec @prac_sec]

We just released SpecterInsight 3.1.0 along with the first release of SpecterInsight VM, a pre-configured Kali Linux system with SpecterInsight C2 fully installed along with Elastic and Kibana for tracking your red team engagements! Check it out!

https://t.co/45rma71Hfj

[PracSec @prac_sec]

Checkout my new post on extracting plaintext credentials from Windows Event Logs!

This technique ships with and is fully integrated with SpecterInsight C2.

https://t.co/vMnbUEcQQ4

[PracSec @prac_sec]

@c2_matrix I’d like to add SpecterInsight to the list!

Name: SpecterInsight
License: Commercial
Price: $500
Link: https://t.co/sKxx4bU9st
Server: .NET 8
Implant: .NET 2.0+/PowerShell/NativeAOT
Multiuser: Yes
UI: GUI
OS: Windows/Linux/Mac
Protocol: HTTP(s)
Can’t fit more details

[PracSec @prac_sec]

I’m happy to announce the release of SpecterInsight v3.0.0: Payload Pipelines!

Write payload pipelines to generate new, obfuscated payloads every-time they’re run. Check it out!

https://t.co/ckOtrXcJJ5

[PracSec @prac_sec]

Checkout our new post on emulating ransomware attacks!

https://t.co/aN3e9ZH3yS

[PracSec @prac_sec]

We are excited to announce the release of SpecterInsight v2.3.0: Ransomware Simulation! Checkout the release notes.

https://t.co/CNjqQ8jofj

[PracSec @prac_sec]

https://t.co/qIvoHt0zOW

Just released SpecterInsight v2.2.0! This release brought a new obfuscated .NET Native AOT payload and 7 new SpecterScripts for lateral movement and persistence. See the release notes for more details!

[PracSec @prac_sec]

We are happy to announce SpecterInsight 2..0.0: Defense Evasion!

https://t.co/J7QrK3AKVE