Xor'd

• About
• Blog

Xor'd

Random Infosec Ramblings

• No Place Like Chrome 08 February 2019
• Persistent Credential Theft with Authorization Plugins 17 October 2018
• Load & Execute Bundles with migrationTool 25 May 2018
• Malicious Installer Plugins 08 February 2018
• Leveraging Emond on macOS For Persistence 17 January 2018
• Bypass Cylance Memory Exploitation Defense & Script Cntrl 25 August 2017
• Empire 2.0 Final Release 14 May 2017
• Empire Domain Fronting 09 February 2017
• In Memory Imports with (Python) Empire 18 January 2017
• An Overview of New Empire Payloads for OSX 25 November 2016
• A Brief Usage Guide for Wmic 02 June 2016
• The Return Of the EmPyre 24 May 2016
• Phishing On the Inside 03 September 2015
• Powershell Web Drive By via Wmic? 03 March 2015
• Try a little harder OSCP 02 March 2015