Cobalt Strike Aggressor Callbacks Blog /October 3, 2023 /The Cobalt Strike 4.9 rel... 2023-10-4 04:1:28 | 阅读: 44 | 收藏 | Rasta Mouse - rastamouse.me beacon bps 128392 1u6ahiu 179184

Building a (slightly) better Melkor Blog /September 6, 2023 /Melkor is a C# POC written... 2023-9-6 23:44:37 | 阅读: 25 | 收藏 | Rasta Mouse - rastamouse.me omod appdomain bmod memory oplaintext

C# Source Generators Blog /July 2, 2023 /IntroductionC# Source Gener... 2023-7-3 01:41:52 | 阅读: 49 | 收藏 | Rasta Mouse - rastamouse.me consoleapp uris sourcecode itemgroup

SharpC2: HTTPS with Redirector Blog /April 4, 2023 /This post will demonstrate how... 2023-4-5 04:21:41 | 阅读: 35 | 收藏 | Rasta Mouse - rastamouse.me nickelviper sharpc2 ec2 certbot ssh

.NET Startup Hooks Blog /January 2, 2023 /tl;drSince .NET Core 3,... 2023-1-3 05:31:0 | 阅读: 73 | 收藏 | Rasta Mouse - rastamouse.me demoapp shellcode startuphook client marshal

Token Impersonation in C# Blog /December 16, 2022 /This post was inspired by... 2022-12-17 00:8:31 | 阅读: 57 | 收藏 | Rasta Mouse - rastamouse.me upvrp0cv3cv htoken writeline impersonate

GetDomain vs GetComputerDomain vs GetCurrentDomain Blog /October 27, 2022 /Many Active Directory enume... 2022-10-28 00:26:6 | 阅读: 41 | 收藏 | rastamouse.me forest writeline pdc odom getdomain

Protected: Evilginx, meet BITB PatreonMany thanks to my Black Hat patrons:Lény Bueno, Ty-reX, Suraj Khetani, Kovert, Dave, Joel... 2022-7-28 05:27:2 | 阅读: 40 | 收藏 | rastamouse.me tomassini banerjee patron jordan jose

Protected: OUs and GPOs and WMI Filters, Oh My! PatreonMany thanks to my Black Hat patrons:Lény Bueno, Ty-reX, Suraj Khetani, Kovert, Dave, Joel... 2022-6-8 02:23:9 | 阅读: 37 | 收藏 | rastamouse.me patrons bueno jay lény kyle

Why Tool-Restricted Exams (Sometimes) Matter Blog /April 16, 2022 /As the author of the Red T... 2022-4-17 03:8:34 | 阅读: 44 | 收藏 | rastamouse.me oscp pnpt simulation engagement stealth

SOCKS4a Proxy in C# Blog /March 28, 2022 /Some time ago, I tweeted a te... 2022-3-29 03:50:53 | 阅读: 52 | 收藏 | rastamouse.me client proxy tokensource socks4 tcpclient

Protected: Adjacency List to Manage P2P Implants PatreonMany thanks to my Black Hat patrons:Ahmed Qadeer, War4uthor, Jatta, Jose Barrientos, Eric... 2022-2-21 23:56:40 | 阅读: 33 | 收藏 | rastamouse.me war4uthor joe huskyhacks suraj cameron

Dumping LSASS with Duplicated Handles Blog /December 27, 2021 /In the previous blog post,... 2021-12-28 04:20:8 | 阅读: 62 | 收藏 | rastamouse.me writeline mimikatz 1056

Protected: Duplicating Handles in C# PatreonMany thanks to my Black Hat patrons:Lény Bueno, Ty-reX, Suraj Khetani, Henrik, SV1, Kover... 2021-11-28 05:09:56 | 阅读: 43 | 收藏 | rastamouse.me eon huskyhacks bisht ghanta likith

Protected: ExternalC2.NET PatreonMany thanks to my Black Hat patrons:memN0ps, Seemant Bisht, digitalohm, Uri Binah, Robert... 2021-11-12 23:17:56 | 阅读: 43 | 收藏 | rastamouse.me fawaz svoboda khetani henrik sv1

D/Invoke Baguette Blog /November 1, 2021 /This post will introduce... 2021-11-01 23:21:33 | 阅读: 51 | 收藏 | rastamouse.me nuget dinvoke donutcore wiki vanilla

NTLM Relaying via Cobalt Strike Blog /July 29, 2021 /NTLM relaying is a popular att... 2021-10-31 21:43:45 | 阅读: 60 | 收藏 | rastamouse.me client portbender loaded machine beacon

Backdoor .NET assemblies with… dnSpy Blog /October 4, 2021 /Placing backdoors in legitim... 2021-10-04 21:56:55 | 阅读: 43 | 收藏 | rastamouse.me 0x31 0x8b 0x89 0x4d 0x2e

Protected: Backdoor .NET assemblies with… dnSpy PatreonMany thanks to my Black Hat patrons:Robert Horn, Joe Helle, Maleick Miles, Adam Svoboda,... 2021-10-04 21:56:55 | 阅读: 52 | 收藏 | rastamouse.me patron miles yue raul dave

Protected: D/Invoke & GadgetToJScript PatreonMany thanks to my Black Hat patrons:Robert Horn, Joe Helle, Maleick Miles, Adam Svoboda,... 2021-09-06 23:24:20 | 阅读: 97 | 收藏 | rastamouse.me patrons joe fawaz kovert adam