UDRL, SleepMask, and BeaconGate 2024-11-30 09:54:48 | 阅读: 3 | 收藏 | Rasta Mouse - rastamouse.me beacon memory udrl stage

Crystal Malware 2024-8-2 00:32:14 | 阅读: 14 | 收藏 | Rasta Mouse - rastamouse.me

Kerberos Delegation Test App Blog /May 11, 2024 /I have been quietly working on... 2024-5-12 00:7:26 | 阅读: 13 | 收藏 | Rasta Mouse - rastamouse.me hades negotiate contoso

Custom Beacon Artifacts Blog /May 7, 2024 /If you’re an experienced Cobalt... 2024-5-7 19:55:29 | 阅读: 82 | 收藏 | Rasta Mouse - rastamouse.me shellcode phear payload artifact memory

YARP as a C2 Redirector Blog /March 9, 2024 /YARP: Yet Another Reverse Prox... 2024-3-10 00:45:5 | 阅读: 61 | 收藏 | Rasta Mouse - rastamouse.me yarp nickelviper c2 teamserver clusterid

ANYSIZE_ARRAY in C# Blog /January 29, 2024 /There are multiple struc... 2024-1-30 02:6:55 | 阅读: 22 | 收藏 | Rasta Mouse - rastamouse.me kerb tkt memory ticketptr

SafeHandle vs IntPtr Blog /January 6, 2024 /C# is a popular language in... 2024-1-7 01:32:34 | 阅读: 20 | 收藏 | Rasta Mouse - rastamouse.me htoken closehandle hduptoken safehandle

Cobalt Strike Aggressor Callbacks Blog /October 3, 2023 /The Cobalt Strike 4.9 rel... 2023-10-4 04:1:28 | 阅读: 38 | 收藏 | Rasta Mouse - rastamouse.me beacon bps 128392 1u6ahiu 179184

Building a (slightly) better Melkor Blog /September 6, 2023 /Melkor is a C# POC written... 2023-9-6 23:44:37 | 阅读: 20 | 收藏 | Rasta Mouse - rastamouse.me omod appdomain bmod memory oplaintext

C# Source Generators Blog /July 2, 2023 /IntroductionC# Source Gener... 2023-7-3 01:41:52 | 阅读: 43 | 收藏 | Rasta Mouse - rastamouse.me consoleapp uris sourcecode itemgroup

SharpC2: HTTPS with Redirector Blog /April 4, 2023 /This post will demonstrate how... 2023-4-5 04:21:41 | 阅读: 32 | 收藏 | Rasta Mouse - rastamouse.me nickelviper sharpc2 ec2 certbot ssh

.NET Startup Hooks Blog /January 2, 2023 /tl;drSince .NET Core 3,... 2023-1-3 05:31:0 | 阅读: 69 | 收藏 | Rasta Mouse - rastamouse.me demoapp shellcode startuphook client marshal

Token Impersonation in C# Blog /December 16, 2022 /This post was inspired by... 2022-12-17 00:8:31 | 阅读: 53 | 收藏 | Rasta Mouse - rastamouse.me upvrp0cv3cv htoken writeline impersonate

GetDomain vs GetComputerDomain vs GetCurrentDomain Blog /October 27, 2022 /Many Active Directory enume... 2022-10-28 00:26:6 | 阅读: 36 | 收藏 | rastamouse.me forest writeline pdc odom getdomain

Protected: Evilginx, meet BITB PatreonMany thanks to my Black Hat patrons:Lény Bueno, Ty-reX, Suraj Khetani, Kovert, Dave, Joel... 2022-7-28 05:27:2 | 阅读: 37 | 收藏 | rastamouse.me tomassini banerjee patron jordan jose

Protected: OUs and GPOs and WMI Filters, Oh My! PatreonMany thanks to my Black Hat patrons:Lény Bueno, Ty-reX, Suraj Khetani, Kovert, Dave, Joel... 2022-6-8 02:23:9 | 阅读: 35 | 收藏 | rastamouse.me patrons bueno jay lény kyle

Why Tool-Restricted Exams (Sometimes) Matter Blog /April 16, 2022 /As the author of the Red T... 2022-4-17 03:8:34 | 阅读: 35 | 收藏 | rastamouse.me oscp pnpt simulation engagement stealth

SOCKS4a Proxy in C# Blog /March 28, 2022 /Some time ago, I tweeted a te... 2022-3-29 03:50:53 | 阅读: 47 | 收藏 | rastamouse.me client proxy tokensource socks4 tcpclient

Protected: Adjacency List to Manage P2P Implants PatreonMany thanks to my Black Hat patrons:Ahmed Qadeer, War4uthor, Jatta, Jose Barrientos, Eric... 2022-2-21 23:56:40 | 阅读: 31 | 收藏 | rastamouse.me war4uthor joe huskyhacks suraj cameron

Dumping LSASS with Duplicated Handles Blog /December 27, 2021 /In the previous blog post,... 2021-12-28 04:20:8 | 阅读: 49 | 收藏 | rastamouse.me writeline mimikatz 1056