techbytom.bsky.social
Privacy, motorcycle, and craft beer geek. Adversarial thinker. Blue team your blue team for better red teaming.
👤 Joined on 16 August 2023
Followers
Following
Total Posts
@techbytom.bsky.socialI integrated Moonwalk++ into Bahamut: every WinHTTP call runs behind a spoofed caller chain while the agent's image is RC4-encrypted and PAGE_NOACCESS original SystemFunction032 + static "MyTest1" key. #RedTeam #windows #EDR #C2 #cybersecurity
Show Post0xPrimo published a loader for Havoc's Demon. One detail I'm excited about, he used the JSON-over-HTTP server for the integration: github.com/0xPrimo/Demo... :) Straight-forward example of setting up whatever hooks you want via a PICO run by the loader too.
Show PostBOOM! This is the biggest thing since sliced bread in the Entra world. Security Default is no longer a giant ON/OFF switch. You can now exclude just individual users from policies!! 1/3
Show PostIt looks like you can execute code by abusing .manifest files.
Show Post