Finding Unpinned and Unpinnable GitHub Actions
How to identify unpinned and unpinnable GitHub actions across your organisation
Pavel Tsakalidis
Personal Blog
Latest posts
Neutralising AMSI System-Wide as an Admin
Use Spartacus to neutralise AMSI system-wide, without having to patch memory
Obfuscating Rubeus using Codecepticon
How to use Codecepticon for obfuscating offensive security tooling, such as Rubeus
DLL Hijacking using Spartacus, outside of DllMain
Exploiting DLL Hijacking vulnerabilities and running payloads outside DllMain
DLL Hijacking using Spartacus
Discovering and exploiting DLL Hijacking vulnerabilities using Spartacus