SpecterOps

Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS dpapi-master-key

dpapi-master-key

Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS

ddos February 23, 2026

LSA Whisperer BOF A Cobalt Strike Beacon Object File (BOF) port of LSA Whisperer — the tool that talks...

The Phantom Attack: A New NTLM Relay Method Evades EDR to Hijack Networks

NTLM Relay

The Phantom Attack: A New NTLM Relay Method Evades EDR to Hijack Networks

ddos August 26, 2025

Logan Goins, a researcher at SpecterOps, has unveiled a novel technique for exploiting NTLM authentication that enables...