LABS / PUBLICATIONS
Security Evasion
Research, published with evidence and technical context.
How Attackers Evade Your Phishing Defenses
This blog post discusses attacker techniques to bypass phishing protections, focusing on open redirects and URL shortening. It examines how attackers mask malicious URLs using reputable domains, emphasizes the importance of dynamic…
SinkVPN: Redirecting endpoint cloud telemetry by abusing usermode VPN tunnels
The article discusses SinkVPN, a technique that enables non-admin users to create malicious VPN connections that can divert and block cloud-bound traffic, evading security measures. It highlights the ease of implementation across…