https://ankhcorp.net/journal/Recent content in Journal on AnkhCorpHugoenhttps://ankhcorp.net/journal/recon-to-root/Fri, 02 Oct 2026 00:00:00 +0000https://ankhcorp.net/journal/recon-to-root/Exploitation Context During a web penetration test, I initiated the reconnaissance phase using a custom script that was already part of my toolkit. Prior to the test, I had enhanced the script by adding new intelligence sources and integrations to expand its asset discovery capabilities. It was during this phase that one of the investigation’s most interesting findings emerged. Reconnaissance Phase The first step was to run the reconnaissance script against the client’s environment.https://ankhcorp.net/journal/how-i-built-snoop/Mon, 21 Sep 2026 00:00:00 +0000https://ankhcorp.net/journal/how-i-built-snoop/Tracking usernames across multiple platforms is one of the most common tasks in OSINT. It seems simple, but platforms are constantly changing their behavior, removing error codes, blocking automated requests, and hiding useful network responses. Because of this, many well-known tools end up breaking or returning false positives. That’s exactly why I built Snoop — a lightweight, focused user enumeration tool that uses an unconventional approach: leveraging third-party services to restore the ability to detect a user’s existence through HTTP responses.https://ankhcorp.net/journal/thegentlemen-ransomware-threat-overview-and-analysis/Tue, 07 Apr 2026 00:00:00 +0000https://ankhcorp.net/journal/thegentlemen-ransomware-threat-overview-and-analysis/Threat Context The Gentlemen is a ransomware group that carries out numerous attacks around the world and has recently attracted notable attention, especially due to the concentration of victims in countries with lower cybersecurity maturity. They remain active, with their first appearance around mid-2025. Primary Nation Targets: US, Brazil, Thailand and India Primary Industry Targets: Logistics, Manufacturing, Financial Services, and Healthcare First Known Victim: JN Aceros (Peru) on 06/30/2025 The core of TheGentlemen is a system of unique keys generated for each victim at the time of the attack.https://ankhcorp.net/journal/cyrillic-phishing-homograph-attack/Tue, 13 Jan 2026 00:00:00 +0000https://ankhcorp.net/journal/cyrillic-phishing-homograph-attack/An Apple developer — someone who had spent ten years reading the company’s official emails, the kind of person who clicks nothing — nearly fell for a phishing message recently. Not because the email was well written. It wasn’t. The domain just looked right. He did the one thing most people don’t: inspected it character by character. One of the letters wasn’t from the alphabet it claimed to be. The ‘a’ that isn’t an ‘a’ Latin a is U+0061.