Dumping LSASS with Duplicated Handles Blog /December 27, 2021 /In the previous blog post,... 2021-12-28 04:20:8 | 阅读: 49 | 收藏 | rastamouse.me writeline mimikatz 1056

Protected: Duplicating Handles in C# PatreonMany thanks to my Black Hat patrons:Lény Bueno, Ty-reX, Suraj Khetani, Henrik, SV1, Kover... 2021-11-28 05:09:56 | 阅读: 41 | 收藏 | rastamouse.me eon huskyhacks bisht ghanta likith

Protected: ExternalC2.NET PatreonMany thanks to my Black Hat patrons:memN0ps, Seemant Bisht, digitalohm, Uri Binah, Robert... 2021-11-12 23:17:56 | 阅读: 41 | 收藏 | rastamouse.me fawaz svoboda khetani henrik sv1

D/Invoke Baguette Blog /November 1, 2021 /This post will introduce... 2021-11-01 23:21:33 | 阅读: 48 | 收藏 | rastamouse.me nuget dinvoke donutcore wiki vanilla

NTLM Relaying via Cobalt Strike Blog /July 29, 2021 /NTLM relaying is a popular att... 2021-10-31 21:43:45 | 阅读: 53 | 收藏 | rastamouse.me client portbender loaded machine beacon

Backdoor .NET assemblies with… dnSpy Blog /October 4, 2021 /Placing backdoors in legitim... 2021-10-04 21:56:55 | 阅读: 39 | 收藏 | rastamouse.me 0x31 0x8b 0x89 0x4d 0x2e

Protected: Backdoor .NET assemblies with… dnSpy PatreonMany thanks to my Black Hat patrons:Robert Horn, Joe Helle, Maleick Miles, Adam Svoboda,... 2021-10-04 21:56:55 | 阅读: 50 | 收藏 | rastamouse.me patron miles yue raul dave

Protected: D/Invoke & GadgetToJScript PatreonMany thanks to my Black Hat patrons:Robert Horn, Joe Helle, Maleick Miles, Adam Svoboda,... 2021-09-06 23:24:20 | 阅读: 87 | 收藏 | rastamouse.me patrons joe fawaz kovert adam

D/Invoke & GadgetToJScript Blog /September 6, 2021 /I’m sure the subject of co... 2021-09-06 23:24:20 | 阅读: 108 | 收藏 | rastamouse.me dinvoke marshal shellcode

Protected: .NET Reflection and Disposable AppDomains PatreonMany thanks to my Black Hat patrons:yue chen, Raul Carmona, eon, Dave, mut8nt, Joel Tomas... 2021-08-17 22:58:09 | 阅读: 53 | 收藏 | rastamouse.me holbrook kovert patrons mut8nt lény

.NET Reflection and Disposable AppDomains Blog /August 17, 2021 /Disclaimer: I didn’t come u... 2021-08-17 22:58:09 | 阅读: 31 | 收藏 | rastamouse.me appdomain loaded payload rubeus

NTLM Relaying via Cobalt Strike – Rasta Mouse Blog /July 29, 2021 /NTLM relaying is a popular att... 2021-07-31 22:21:21 | 阅读: 115 | 收藏 | rastamouse.me client portbender loaded machine beacon

Exploring Process Injection OPSEC – Part 2 Blog /July 5, 2021 /In Part 1, we reviewed the v... 2021-07-05 22:50:33 | 阅读: 54 | 收藏 | rastamouse.me shellcode hmemory

Infrastructure as Code (Terraform + Ansible) Blog /June 21, 2021 /If you’ve any experience with... 2021-06-21 22:55:18 | 阅读: 75 | 收藏 | rastamouse.me covenant rasta redirector security ssh

Cobalt Strike Spawn & Tunnel Blog /June 12, 2021 /Cobalt Strike 4.2 introduced a... 2021-06-13 06:10:32 | 阅读: 123 | 收藏 | rastamouse.me 4444 spunnel reverse beacon payload

Exploring Process Injection OPSEC – Part 1 Blog /June 6, 2021 /This is the first in a short se... 2021-06-07 04:15:39 | 阅读: 53 | 收藏 | rastamouse.me shellcode memory rwx injection beacon

Bypass In-memory Integrity Checking Blog /June 4, 2021 /In the Memory Patching AMSI Byp... 2021-06-04 21:31:11 | 阅读: 56 | 收藏 | rastamouse.me rubeus backup bypass memory

Memory Patching AMSI Bypass Blog /June 3, 2021 /This post is a replacement for... 2021-06-04 03:05:46 | 阅读: 124 | 收藏 | rastamouse.me rubeus memory amsicontext powershell

Process Injection using DInvoke Back in June, I posted a short update on my shared blog regarding t... 2020-07-19 09:00:00 | 阅读: 247 | 收藏 | rastamouse.me openprocess shellcode

SharpC2 Project Outcomes Solution Demo... 2020-05-10 09:00:00 | 阅读: 164 | 收藏 | rastamouse.me agents c2