Dark Security and Total Chaos
Packet.Zip is a blog dedicated to adversarial AI, cyber counter intelligence, and offensive security. Articles are written by security professionals and researchers to bring an in-depth, real-world look at emerging threats, techniques, and defenses.
“a blogger, InfoSec specialist, super hero… and all around good guy.”
~/featured
Deep dives our editors keep coming back to — start here.
From the PolinRider DPRK supply chain drama to the JadePuffer agentic ransomware debate, the security community is having big conversations this week. Here's the pulse from r/netsec, r/cybersecurity,
AI agents are being weaponized in the wild — from crypto-stealing prompt injections to fully autonomous ransomware. Here's what the AI attack surface looks like in July 2026, and why your security tea
This week's attacker playbook includes video cable data exfiltration, Blogspot-hosted fileless loaders, a new Iranian C2 framework, and ClickFix phishing that impersonates Google's own verification UI
Active exploitation confirmed on Adobe ColdFusion. PoC released for Linux root escalation. ShinyHunters tearing through healthcare and education sectors. Here's the threat board and what to do about i
~/latest
Fresh drops from the lab — news, exploits, and analysis.
A hands-on Impacket tutorial for beginners: build a lab, then walk Kerberoasting, AS-REP roasting, secretsdump/DCSync, and remote execution end to end — with the red team, blue team, and attacker view of each, plus the exact Windows event IDs that detect them and the controls that stop them.
Build a lab Active Directory domain, collect it with SharpHound, and use BloodHound CE to find the permission chains that lead to Domain Admin — plus how red teams, blue teams, and real attackers each use it, and how to detect and dismantle the paths.
A beginner-friendly, step-by-step guide to DNS tunneling: how it works, how to build a safe isolated lab with iodine, what it looks like on the wire, and — most importantly — how to detect and defend against it.
The blog returns with a decade of archives intact and a new focus: adversarial and offensive AI. Here's what to expect.
From the PolinRider DPRK supply chain drama to the JadePuffer agentic ransomware debate, the security community is having big conversations this week. Here's the pulse from r/netsec, r/cybersecurity,
AI agents are being weaponized in the wild — from crypto-stealing prompt injections to fully autonomous ransomware. Here's what the AI attack surface looks like in July 2026, and why your security tea
~/lab
Three ways in, depending on how deep you want to go.
Breach post-mortems, emerging adversarial AI threats, and what the headlines actually mean for defenders on the ground.
Hands-on labs, tooling walkthroughs, and reproducible attack demos — learn offensive techniques by running them yourself.
Unfiltered takes on where security is heading — machine-speed offense, AI-built malware, and the defenses that might keep up.
~/podcast
Interviews, war stories, and threat deep dives with security practitioners — straight from the people breaking and defending real systems.
~/subscribe
New research, tutorials, and podcast episodes in your inbox. No spam, no tracking pixels — just the good stuff.