Joshua Magri

Senior Managing Security Consultant, Adversary Services, IBM X-Force Red

Joshua Magri is a Red Team Operator on the Adversary Simulation team, working as a senior managing consultant at IBM's X-Force Red. He's previously worked as a cloud penetration tester, where he found several bugs in Azure and earned a spot as a Microsoft Most Valuable Researcher. He holds the GSEC, GCIH, GCFA, and OSCP certifications.

X-Force January 17, 2025

Being a good CLR host – Modernizing offensive .NET tradecraft

14 min read - The modern red team is defined by its ability to compromise endpoints and take actions to complete objectives. To achieve the former, many teams implement their own custom command-and-control (C2) or use an open-source option. For the latter, there is…

Offensive Security August 22, 2024

You just got vectored – Using Vectored Exception Handlers (VEH) for defense evasion and process injection

10 min read - Vectored Exception Handlers (VEH) have received a lot of attention from the offensive security industry in recent years, but VEH has been used in malware for well over a decade now. VEH provides developers with an easy way to catch…

Adversary Services June 28, 2023

Your BOFs are gross, put on a mask: How to hide beacon during BOF execution

8 min read - In this post, we’ll review a simple technique that we’ve developed to encrypt Cobalt Strike’s Beacon in memory while executing BOFs to prevent a memory scan from detecting Beacon. Picture this — you’re on a red team engagement and your…

Failed to load data

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.

Subscribe today

Analysis and insights from hundreds of the brightest minds in the cybersecurity industry to help you prove compliance, grow business and stop threats.

Cybersecurity News By Topic By Industry Exclusive Series X-Force Podcast Events Contact About Us

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

Joshua Magri

Being a good CLR host – Modernizing offensive .NET tradecraft

You just got vectored – Using Vectored Exception Handlers (VEH) for defense evasion and process injection

Your BOFs are gross, put on a mask: How to hide beacon during BOF execution

{{{title}}}

Topic updates