FallenAngel666

fallenangelc2.bsky.social

28 September 2026 02:37

I integrated LoudSunRun-style stack spoofing into Bahamut so direct API calls and indirect syscalls, which still execute from inside ntdll present a legitimate caller chain.

Raphael Mudge

raphaelmudge.bsky.social

23 September 2026 10:26

If you are in London, @rastamouse.me is THE headliner speaker at the beac0n red teaming conference tomorrow talking CS and CPL tradecraft. Tickets here: www.eventbrite.co.uk/e/beacon-26-... Org/conf details here: beac0n.org

Raphael Mudge

raphaelmudge.bsky.social

21 September 2026 21:33

It's a Mod, Mod, Mod, Mod World aff-wg.org/2026/09/21/i... TCG update: - .spec files are now modules w/ query-able meta-info - Added hexdump and dump to see intermediate outputs - Added encode&mask for content transforms And, a modular demo for encode/mask: tradecraftgarden.org/simpletransf...

FallenAngel666

fallenangelc2.bsky.social

19 September 2026 18:08

Zilean is working properly in Bahamut !!!! It’s been a good experiment with Sleepmask as a replacement for Ekko. What’s more, there’s no documentation on Zilean (I think my AI assistant has got the blues and my hands are aching). #redteam #UDRL #mythicc2 #cybersecurity #C2 #windows #EDR

5pider

5pider.net

19 September 2026 03:24

New Release Havoc Professional 0.8: Leviathan 🩸 - Introducing Kaine User-Defined C2 - Expanded Linux post-ex capabilities - Refactored port forwarding and sleep masking - Enhanced .NET/PowerSafe execution - In-Memory PE Execution and BOF-PE support Release: www.infinitycurve.org/blog/leviathan