--- title: Research and Insights | Offensive description: Offensive | Cyber Security Research and Insights --- [![avantguard](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=254&height=120&name=LogoInverted.png "avantguard")](https://avantguard.io?hsLang=en) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/über-uns) - [Experience](https://avantguard.io/en/erfahrung) - [Career](https://avantguard.io/de/karriere) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/kontakt) En [![avantguard](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=144&height=65&name=LogoInverted.png "avantguard")](https://avantguard.io?hsLang=en) [![Dark-logo-small-1](https://www.fthemes.net/hubfs/Dark-logo-small-1.png "Dark-logo-small-1")](https://avantguard.io?hsLang=en) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/über-uns) - [Experience](https://avantguard.io/en/erfahrung) - [Career](https://avantguard.io/de/karriere) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/kontakt) En [![avantguard](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=144&height=65&name=LogoInverted.png "avantguard")](https://avantguard.io?hsLang=en) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/über-uns) - [Experience](https://avantguard.io/en/erfahrung) - [Career](https://avantguard.io/de/karriere) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/kontakt) Current language: English Filter by tag All Offensive Red Team Research Covenant Bypass AI Cleartext Credentials Defensive News AD CS Active Directory Conti HTB Keepass PingCastle PowerShell Pro Labs Ransomware Review Shares Snaffler Topic # Offensive [![BlueHammer and RedSun analysed](https://avantguard.io/hs-fs/hubfs/Blog/BlueHammerRedSun/bluehammer-1.png?width=400&upsize=true&name=bluehammer-1.png)](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) [News](https://avantguard.io/en/blog/tag/news) ##### [BlueHammer and RedSun analysed](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) In the past few months, a security researcher that goes by the name of Chaotic Eclipse has... 21 minute read [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) 9 June 2026 [Read More](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) [![Plaintext in Memory: Revisiting Browser Password Security](https://avantguard.io/hs-fs/hubfs/Blog/Passwortsicherheit%20im%20Browser/title-small.png?width=400&upsize=true&name=title-small.png)](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Research](https://avantguard.io/en/blog/tag/research) [Cleartext Credentials](https://avantguard.io/en/blog/tag/cleartext-credentials) ##### [Plaintext in Memory: Revisiting Browser Password Security](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) ## Initial situation In early May, it became publicly known that Microsoft Edge keeps stored passwords... 2 minute read [Christian Bieg](https://avantguard.io/en/blog/author/christian-bieg) 22 May 2026 [Read More](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) [![Experience Report: AI-Assisted BOF Development in Red Teaming](https://avantguard.io/hs-fs/hubfs/image-3-png.png?width=400&upsize=true&name=image-3-png.png)](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) [Offensive](https://avantguard.io/en/blog/tag/offensive) [AI](https://avantguard.io/en/blog/tag/ai) ##### [Experience Report: AI-Assisted BOF Development in Red Teaming](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) Over the past few days, I have been exploring how a current credential dumping tool like KslKatz... 7 minute read [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) 8 April 2026 [Read More](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) [![Threadless Ops II – Enhanced Evasion](https://avantguard.io/hs-fs/hubfs/Blog/threadless2/new_plan.png?width=400&upsize=true&name=new_plan.png)](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Research](https://avantguard.io/en/blog/tag/research) [Red Team](https://avantguard.io/en/blog/tag/red-team) ##### [Threadless Ops II – Enhanced Evasion](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) The process injection technique via threadless injection that we discussed in our [first blog post](https://avantguard.io/blog/threadless-ops?hsLang=en)... 17 minute read [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) 27 February 2026 [Read More](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) [![The Sins Of NTLMv1](https://avantguard.io/hs-fs/hubfs/Blog/NTLMv1/rainbow_table_structure.png?width=400&upsize=true&name=rainbow_table_structure.png)](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) ##### [The Sins Of NTLMv1](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) In the past year, one particular configuration in our clients' Active Directory (AD) domains has... 11 minute read [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) 3 February 2026 [Read More](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) [![Threadless Ops - Enhanced Shellcoding for Threadless Injections](https://avantguard.io/hs-fs/hubfs/Overview_Plan.png?width=400&upsize=true&name=Overview_Plan.png)](https://avantguard.io/en/blog/threadless-ops) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Research](https://avantguard.io/en/blog/tag/research) [Red Team](https://avantguard.io/en/blog/tag/red-team) ##### [Threadless Ops - Enhanced Shellcoding for Threadless Injections](https://avantguard.io/en/blog/threadless-ops) Process Injection is essential in red teaming and serves various strategic objectives, enabling... 39 minute read [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) 17 April 2025 [Read More](https://avantguard.io/en/blog/threadless-ops) [![Get A Handle On Indicators Of Compromise](https://avantguard.io/hs-fs/hubfs/Monitoring_File_Handles/PCRE_in_temp.png?width=400&upsize=true&name=PCRE_in_temp.png)](https://avantguard.io/en/blog/get-a-handle-on-indicators-of-compromise) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) ##### [Get A Handle On Indicators Of Compromise](https://avantguard.io/en/blog/get-a-handle-on-indicators-of-compromise) It's been a while since our latest blog post. Being busy with customer projects and growing our... 4 minute read [Jann Lemm](https://avantguard.io/en/blog/author/jann-lemm) 4 July 2024 [Read More](https://avantguard.io/en/blog/get-a-handle-on-indicators-of-compromise) [![Extending The Covenant: Part 3](https://avantguard.io/hs-fs/hubfs/Extending_The_Covenant_Part_3/assemblies_during_execution.png?width=400&upsize=true&name=assemblies_during_execution.png)](https://avantguard.io/en/blog/extending-the-covenant-part-3) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) [Covenant](https://avantguard.io/en/blog/tag/covenant) ##### [Extending The Covenant: Part 3](https://avantguard.io/en/blog/extending-the-covenant-part-3) This is the fourth part of a series of blog posts about our recent work with the open source C2... 9 minute read [Jann Lemm](https://avantguard.io/en/blog/author/jann-lemm) 3 March 2023 [Read More](https://avantguard.io/en/blog/extending-the-covenant-part-3) [![Extending The Covenant: Part 2](https://avantguard.io/hs-fs/hubfs/Extending_The_Covenant_Part_2/inactive_grunts.png?width=400&upsize=true&name=inactive_grunts.png)](https://avantguard.io/en/blog/extending-the-covenant-part-2) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) [Covenant](https://avantguard.io/en/blog/tag/covenant) ##### [Extending The Covenant: Part 2](https://avantguard.io/en/blog/extending-the-covenant-part-2) This is the third part of a series of blog posts about our recent work with the open source C2... 6 minute read [Jann Lemm](https://avantguard.io/en/blog/author/jann-lemm) 13 December 2022 [Read More](https://avantguard.io/en/blog/extending-the-covenant-part-2) [![Extending The Covenant](https://avantguard.io/hs-fs/hubfs/Extending_The_Covenant/ListModules_example.png?width=400&upsize=true&name=ListModules_example.png)](https://avantguard.io/en/blog/extending-the-covenant) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) [Covenant](https://avantguard.io/en/blog/tag/covenant) ##### [Extending The Covenant](https://avantguard.io/en/blog/extending-the-covenant) This is the second part of a series of blog posts about my recent work with the open source C2... 4 minute read [Jann Lemm](https://avantguard.io/en/blog/author/jann-lemm) 28 October 2022 [Read More](https://avantguard.io/en/blog/extending-the-covenant) [1](https://avantguard.io/en/blog) [2](https://avantguard.io/en/blog/tag/offensive/page/2) ##### Menu - [Home](https://avantguard.io/en/homepage) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/über-uns) - [Experience](https://avantguard.io/en/erfahrung) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/kontakt) ##### Services - [Basic Health Check](https://avantguard.io/en/basic_health_check) - [Penetration Testing](https://avantguard.io/en/penetration-test) - [Red Teaming](https://avantguard.io/en/red-teaming) - [AD Security Improvement](https://avantguard.io/en/ad_improvement) - [HIST](https://avantguard.io/en/hist) - [Other](https://avantguard.io/en/services) ##### Research - [Cleartext Credentials](https://avantguard.io/en/blog/plaintext-credentials) - [Overload Mapping](https://avantguard.io/blog/overload-mapping-vs.-memory-scanner) - [Ransomware](https://avantguard.io/en/blog/what-really-helps-against-ransomware) - [Red Teaming](https://avantguard.io/en/blog/red-teaming) - [KeePass](https://avantguard.io/en/blog/attacking-and-hardening-keepass) - [PowerShell Logging](https://avantguard.io/en/blog/powershell-enhanced-logging-capabilities-bypass) - [AD CS](https://avantguard.io/en/blog/active-directory-certificate-services) © 2026 avantguard cyber security AG ##### avantguard cyber security AG Neue Jonastrasse 52 8640 Rapperswil-Jona Switzerland +41 55 253 30 30 [info@avantguard.io](mailto:info@avantguard.io) ![flagge_schweiz](https://avantguard.io/hs-fs/hubfs/flagge_schweiz.png?width=40&height=40&name=flagge_schweiz.png) [Privacy Statement](https://avantguard.io/en/datenschutzerkl%C3%A4rung?hsLang=en) [Follow us on LinkedIn](https://ch.linkedin.com/company/avantguard-cyber-security-ag) [Follow us on Twitter](https://twitter.com/avantguard_io) ![](https://f.hubspotusercontent00.net/hubfs/7712601/back-to-top.png)