Nobody Approved This: Hijacking Approval Authority Across AI Agents and Workflows

Poisoning Copilot CoWork: Reworking Trust in AI Agents​​​

Weaponizing ADMX for Cloud-to-On-Prem Lateral Movement.

​

WATCH VIDEO

Weaponizing Windows COM for Stealth Execution.

​

WATCH VIDEO

Abusing Global ARM APIs

​​​​

WATCH VIDEO

Forging Trusts for Deception in Active Directory​​

PowerShell for

Practical Purple

Teaming

Lethal Client

Side Attacks using PowerShell​

Hacking the

future with

USB HID​

Operationalizing Microsoft Defender for EDR Evasion

​

Dead Assets Walking : Two Silent Roads Into a Billion-Dollar Enterprise​​​

Hacking Browsers: The Easy Way.

​

WATCH VIDEO

Evading Microsoft Defender for Identity: Red Team Tradecraft for Active Directory Attacks.​

​​​​​​

WATCH VIDEO

Evading Entra ID Protection

​​​​

WATCH VIDEO

Hacked? Pray that the Attacker used PowerShell

AMSI: How Windows 10 Plans to Stop Script-Based Attacks ​

Powerpreter:

Post Exploitation

like a Boss​

One Key to Sign Them All: Forging Service Identity at the Mesh Boundary​​

Nopal: Using Microsoft Project Opal features in Red Team Tradecraft​​​

HoundMasker: Privacy-Preserving Attack Path Analysis.

​​

WATCH VIDEO

Abusing Azure VMs

​​

​​​

​

​

WATCH VIDEO

0wn-premises: Bypassing Microsoft Defender for Identity

​

Red Team Revenge - Attacking

Microsoft ATA

Continuous Intrusion: Why CI tools are an Attacker's Best Friends​

PowerShell

for Penetration

Testers​

The Trojan Pull Request​​

​​

​

​

Continuous Access Evasion Evading Microsoft CAE​​

Abusing Synced Passkeys in Azure.

​​​

​

WATCH VIDEO

Abusing Copilot Agent

​​​​​​​​​

​

​​​​​

WATCH VIDEO

RACE - Minimal Rights and ACE for Active Directory Dominance​​

​

Evading Microsoft ATA for Active Directory Domination

Workshop:PowerShell

for Penetration

Testers​

Owning Windows 8 with Human Interface Devices​