Regex: Simplicity, Security, and Power
by Douglas Berdeaux, Senior Security Consultant I have a question for web application penetration testers: How do you provide remediation advice to clients for user input handling flaws in their […]
Blog – Red Siege Information Security
Continuous Penetration Testing: Explained
Continuous penetration testing is a proactive approach that involves ongoing automated and manual security testing to identify vulnerabilities in a much shorter timeline. Unlike annual or quarterly penetration tests, this […]
Red Siege at Wild West Hackin’ Fest Mile High 2025 – What to Expect!
The Red Siege train is heading to Denver, Colorado, for the first-ever Wild West Hackin’ Fest @ Mile High from February 5-7, 2025! If you’re a cybersecurity professional who loves […]
Security Posture Review and Penetration Testing
Ever wondered if your organization is truly secure or if your teams are just crossing items off a checklist? A Security Posture Review (SPR) is a solid way to answer […]
Security Posture Review: The Process
The Security Posture Review (SPR) is the newest addition to our suite of security offerings at Red Siege. We’ve combined our collective experiences in red team, blue team, and security […]
From Assessment to Action: The Red Siege Security Posture Review Is Here
At Red Siege, we’ve earned our reputation as a leader in offensive security by delivering expert-driven solutions that prioritize what matters most to CISOs and cybersecurity professionals. From penetration testing […]
Time Hacking: Pause, Analyze, Exploit
By Stuart Rorer, Security Consultant Conflicts of Time “Time is of the essence”, an idiom of immense truth. Being one of our most valuable commodities, it often feels as if […]
SIEGECAST: Modern Malware
In the most recent SiegeCast, Corey Overstreet, Senior Security Consultant at Red Siege, took cybersecurity professionals on a deep dive into modern malware techniques. With the landscape of malware evolving […]
The Vishing CTF Challenge
This is for the Vishing CTF Challenge at Wild West Hackin Fest 2024. Please visit our booth to get the starting phone number. In this vishing CTF challenge, your mission […]
Red Siege at Wild West Hackin’ Fest 2024: What to Expect
As proud sponsors of Wild West Hackin’ Fest, Red Siege is excited to return to Deadwood for another year of cutting-edge training, engaging talks, and unique experiences. The event is […]
Adventures in Shellcode Obfuscation! Part 14: Further Research
by Mike Saunders, Principal Consultant This blog is the fourteenth in a series of blogs on obfuscation techniques for hiding shellcode. You can find the rest of the […]
Adventures in Shellcode Obfuscation! Part 13: Calculating Offsets
by Mike Saunders, Principal Security Consultant This blog is the thirteenth in a series of blogs on obfuscation techniques for hiding shellcode. You can find the rest of […]
SiegeCast: Be Your Enemy
Collaboration between offensive (Red Team) and defensive (Blue Team) operations is essential to fortify an organization’s defenses. During a recent SiegeCast session, Tim Medin (CEO of Red Siege), Justin Polk […]
Adventures in Shellcode Obfuscation! Part 12: Jigsaw
by Mike Saunders, Principal Consultant This blog is the twelfth in a series of blogs on obfuscation techniques for hiding shellcode. You can find the rest of the […]
How to Secure Your Penetration Testing Environment with Full Disk Encryption
by Douglas Berdeaux, Senior Security Consultant As penetration testers, ensuring the security and integrity of our tools and data is paramount. One key aspect of this is creating a […]
Adventures in Shellcode Obfuscation! Part 11: Jargon
by Mike Saunders, Principal Consultant This blog is the eleventh in a series of blogs on obfuscation techniques for hiding shellcode. You can find the rest of the […]
Adventures in Shellcode Obfuscation! Part 10: Shellcode as MAC Addresses
by Mike Saunders, Principal Security Consultant This blog is the tenth in a series of blogs on obfuscation techniques for hiding shellcode. You can find the rest of […]
Adventures in Shellcode Obfuscation! Part 9: Shellcode as IP Addresses
by Mike Saunders, Principal Security Consultant This blog is the ninth in a series of blogs on obfuscation techniques for hiding shellcode. You can find the rest of […]
Defense in Depth of a Single HTTP Parameter
by Douglas Berdeaux, Senior Security Consultant As cybersecurity professionals, we adhere to standard practices that ensure that we are absolutely as thorough as possible in our hunt for security vulnerabilities […]
Adventures in Shellcode Obfuscation Part 8: Shellcode as UUIDs
by Mike Saunders, Principal Security Consultant This blog is the eighth in a series of blogs on obfuscation techniques for hiding shellcode. You can find the rest of […]
Penetration Testing, Red Teaming, and Vulnerability Assessments