~/authors/aamir-lakhani
Founder · Packet.Zip
Aamir Lakhani is a leading senior security strategist responsible for providing IT security solutions to major enterprises and government organizations. He creates technical security strategies and leads security implementation projects for Fortune 500 companies, and has designed offensive counter-defense measures for the Department of Defense and national intelligence agencies.
His areas of expertise include adversarial AI, cyber defense, mobile application threats, malware management, Advanced Persistent Threat (APT) research, and the dark web. He is the author or contributor of several books, and has appeared on FOX Business News, National Public Radio, and other media outlets as an expert on cybersecurity.
Writing under the pseudonym Packet.Zip, he operates this blog. In its list of 46 Federal Technology Experts to Follow on Twitter, Forbes described Aamir Lakhani as "a blogger, InfoSec specialist, super hero…and all around good guy."
~/articles
200 published articles
A hands-on Impacket tutorial for beginners: build a lab, then walk Kerberoasting, AS-REP roasting, secretsdump/DCSync, and remote execution end to end — with the red team, blue team, and attacker view of each, plus the exact Windows event IDs that detect them and the controls that stop them.
Build a lab Active Directory domain, collect it with SharpHound, and use BloodHound CE to find the permission chains that lead to Domain Admin — plus how red teams, blue teams, and real attackers each use it, and how to detect and dismantle the paths.
A beginner-friendly, step-by-step guide to DNS tunneling: how it works, how to build a safe isolated lab with iodine, what it looks like on the wire, and — most importantly — how to detect and defend against it.
The blog returns with a decade of archives intact and a new focus: adversarial and offensive AI. Here's what to expect.
From the PolinRider DPRK supply chain drama to the JadePuffer agentic ransomware debate, the security community is having big conversations this week. Here's the pulse from r/netsec, r/cybersecurity,
AI agents are being weaponized in the wild — from crypto-stealing prompt injections to fully autonomous ransomware. Here's what the AI attack surface looks like in July 2026, and why your security tea
This week's attacker playbook includes video cable data exfiltration, Blogspot-hosted fileless loaders, a new Iranian C2 framework, and ClickFix phishing that impersonates Google's own verification UI
Active exploitation confirmed on Adobe ColdFusion. PoC released for Linux root escalation. ShinyHunters tearing through healthcare and education sectors. Here's the threat board and what to do about i
This week's top five offensive security stories — DPRK supply chain ops, active ColdFusion exploitation, China-nexus RAT campaigns, VM escape vulnerabilities, and rapid-fire Gitea probing. Here's what
Artificial intelligence is quickly becoming part of everyday business workflows. We use AI to summarize emails, write reports, analyze logs, review documents, generate code, support customers, and automate tasks.That sounds great.It also means we are building systems where one AI may talk to another
Attackers are mass-exploiting a critical remote code execution vulnerability in SAP NetWeaver, with security researchers confirming hundreds of internet-exposed systems compromised within days of disclosure.
CISA issued an emergency directive requiring all federal agencies to patch a critical Ivanti Endpoint Manager Mobile authentication bypass vulnerability being actively exploited by nation-state hackers.