# m1n1's Offensive Security Blog

## m1n1's Offensive Security Blog

- [About](https://blog.joeminicucci.com/master.md)
- [2021](https://blog.joeminicucci.com/2021.md)
- [Office Pretexting Using AutoText and Remote Templates](https://blog.joeminicucci.com/2021/office-pretexting-using-autotext-and-remote-templates.md)
- [Introducing Red Ira - Red Team Infrastructure Automation Suite](https://blog.joeminicucci.com/2021/redira.md): v1.0
- [Who Let the ARPs Out? - From ARP Spoof to Domain Compromise](https://blog.joeminicucci.com/2021/who-let-the-arps-out-from-arp-spoof-to-domain-compromise.md): Compromising AD in an assumed breach scenario using old-school network attacks
- [2020](https://blog.joeminicucci.com/2020.md)
- [Basic Exploitation of SSO Access Tokens](https://blog.joeminicucci.com/2020/basic-exploitation-of-sso-access-tokens.md): Musings on basic access token exploitation & security checks on incorrectly/custom implemented SSO
- [2019](https://blog.joeminicucci.com/2019.md)
- [Wireless Implant C2 for Security Operations](https://blog.joeminicucci.com/2019/wireless-implant-c2-security-ops.md): Based on research done for the DEFCON 27 Wireless Village
- [2018](https://blog.joeminicucci.com/2018.md)
- [Hunting Rogue Access Points](https://blog.joeminicucci.com/2018/hunting-rogue-access-points.md): Initial field work at DEFCON 26 revealing strategies to hunting rogue access points