#red-team
5 posts
Brewing Your Own Offensive Coding Assistant: Fine-Tuning LLMs for Red Team Work
A practitioner's walkthrough of QLoRA fine-tuning a local LLM for offensive security tasks — dataset construction, training with Unsloth, evaluation, and deployment via Ollama. Built for engagements where sending tradecraft to a cloud API isn't an option.
VibeLoader: Loading for Fun and No Profit
A walkthrough of VibeLoader — a custom shellcode loader featuring APC injection, fiber-based execution, module stomping, MAC address obfuscation, and OPSEC-first memory management.
Using AWS Lambda as a C2 Redirector
How to use serverless functions as disposable C2 redirectors — routing beacon traffic through AWS Lambda and API Gateway to protect your team server.
Modern C2 Usage: Frameworks, Tradecraft, and Infrastructure
A practical overview of modern command and control frameworks, infrastructure design, and operational tradecraft for red team engagements.
Welcome to BrewCoffee Offensive Security Blog
Introducing this blog — a space for offensive security research, penetration testing techniques, and red team operations.