BC Security

info@BC-Security.org

Founded in 2018, BC Security seeks to provide customers with unparalleled value. We provide cybersecurity assessments and training across a broad range of disciplines with technical expertise and a strong understanding of compliance regulations and risk mitigations that are essential to conducting business in today’s world.

LEARN MORE

Our Services

Enterprise Network Testing

Wireless Protocol Testing

Endpoint Security

Mobile Application Security

Education and Training

Internet of Things (IoT)

Architecture Review

Red Teaming

Tool Developement

Vulnerability Scanning

Hardware Reverse-Engineering

Incident Response Planning

Offensive Security Tools Cx01N

Not Your Grandfather’s Empire

Not Your Grandfather’s Empire I’ve wanted to put this blog together since returning home from DEFCON. Anytime we ran into someone who recognized our swag, they mentioned how much they loved Empire back in the day and didn’t realize it [...]

Read All
Cyber Security Hubbl3

ScriptBlock Smuggling: Spoofing PowerShell Security Logs and Bypassing AMSI Without Reflection or Patching

Note: All code samples shown in the post can be found in our repo here In recent years, PowerShell tradecraft has seen a drop in popularity among pentesters, red teams, and to some extent APTs. There are several reasons for [...]

Read All
Cyber Security Hubbl3

Bridging the Gap: Applying Systems Engineering to Organizational Cyber Risk Management

Recently, while discussing cyber risk management with a customer, they made the observation that there is a lot of training for top-level risk management in the shape of things like CISSP that focuses on building policy. There is also a [...]

Read All
Cyber Security Hubbl3

Survivorship Bias and How Red Teams Can Handle It

Reporting is, by nature, only the threat actors that have been caught. What about all the ones that didn’t get caught? There is no way to examine that and It comes down to the fact that we don’t know what [...]

Read All
Cyber Security Hubbl3

Ransomware during a Pentest, Yes or No?

NOTE: Some of the topics in this article are probably going to be a bit contentious, but part of the hope in publishing this article is to drive some additional discussion within the offensive security community Ransomware has become one [...]

Read All