A personal blog by the developer of the Xenon Mythic C2 agent, covering red team tradecraft, EDR evasion, process injection, and building COFF/BOF loaders. Readers get hands-on walkthroughs of offensive tooling internals and the author's reflections on which evasion approaches are worth pursuing.
Website: https://c0rnbread.com/
watchTowr Labs publishes technical deep dives into newly disclosed and actively exploited vulnerabilities in enterprise software such as PaperCut, Atlassian products and Citrix NetScaler. Posts cover how the products work, the affected versions, and the exploitation chains, written with a sarcastic voice.
A security blog covering threat intelligence, offensive security, and the attack surface created by AI agents. Issues combine original measurement, experiments, and threat-modeling work, including a harness for testing autonomous offensive agents and credential pivots in agent estates.
Payload Forge publishes first-person offensive security research, including CVE disclosures found while working through the Red Team Ops (CRTO) course stack. Posts walk through discovery, exploitation details, vendor and CNA disclosure timelines, and remediation.
Offensive security research write-ups detailing HTTP request smuggling and cache poisoning chains against major CDN and edge platforms such as Azure Front Door, Akamai and F5. Readers get step-by-step technical narratives of how the bugs were discovered, exploited and reported, including bounty outcomes.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
