YARP as a C2 Redirector Blog /March 9, 2024 /YARP: Yet Another Reverse Prox... 2024-3-10 00:45:5 | 阅读: 75 | 收藏 | Rasta Mouse - rastamouse.me yarp nickelviper c2 teamserver clusterid

ANYSIZE_ARRAY in C# Blog /January 29, 2024 /There are multiple struc... 2024-1-30 02:6:55 | 阅读: 35 | 收藏 | Rasta Mouse - rastamouse.me kerb tkt memory ticketptr

SafeHandle vs IntPtr Blog /January 6, 2024 /C# is a popular language in... 2024-1-7 01:32:34 | 阅读: 31 | 收藏 | Rasta Mouse - rastamouse.me htoken closehandle hduptoken safehandle

Cobalt Strike Aggressor Callbacks Blog /October 3, 2023 /The Cobalt Strike 4.9 rel... 2023-10-4 04:1:28 | 阅读: 50 | 收藏 | Rasta Mouse - rastamouse.me beacon bps 128392 1u6ahiu 179184

Building a (slightly) better Melkor Blog /September 6, 2023 /Melkor is a C# POC written... 2023-9-6 23:44:37 | 阅读: 29 | 收藏 | Rasta Mouse - rastamouse.me omod appdomain bmod memory oplaintext

C# Source Generators Blog /July 2, 2023 /IntroductionC# Source Gener... 2023-7-3 01:41:52 | 阅读: 53 | 收藏 | Rasta Mouse - rastamouse.me consoleapp uris sourcecode itemgroup

SharpC2: HTTPS with Redirector Blog /April 4, 2023 /This post will demonstrate how... 2023-4-5 04:21:41 | 阅读: 38 | 收藏 | Rasta Mouse - rastamouse.me nickelviper sharpc2 ec2 certbot ssh

.NET Startup Hooks Blog /January 2, 2023 /tl;drSince .NET Core 3,... 2023-1-3 05:31:0 | 阅读: 76 | 收藏 | Rasta Mouse - rastamouse.me demoapp shellcode startuphook client marshal

Token Impersonation in C# Blog /December 16, 2022 /This post was inspired by... 2022-12-17 00:8:31 | 阅读: 64 | 收藏 | Rasta Mouse - rastamouse.me upvrp0cv3cv htoken writeline impersonate

GetDomain vs GetComputerDomain vs GetCurrentDomain Blog /October 27, 2022 /Many Active Directory enume... 2022-10-28 00:26:6 | 阅读: 45 | 收藏 | rastamouse.me forest writeline pdc odom getdomain

Protected: Evilginx, meet BITB PatreonMany thanks to my Black Hat patrons:Lény Bueno, Ty-reX, Suraj Khetani, Kovert, Dave, Joel... 2022-7-28 05:27:2 | 阅读: 42 | 收藏 | rastamouse.me tomassini banerjee patron jordan jose

Protected: OUs and GPOs and WMI Filters, Oh My! PatreonMany thanks to my Black Hat patrons:Lény Bueno, Ty-reX, Suraj Khetani, Kovert, Dave, Joel... 2022-6-8 02:23:9 | 阅读: 41 | 收藏 | rastamouse.me patrons bueno jay lény kyle

Why Tool-Restricted Exams (Sometimes) Matter Blog /April 16, 2022 /As the author of the Red T... 2022-4-17 03:8:34 | 阅读: 48 | 收藏 | rastamouse.me oscp pnpt simulation engagement stealth

SOCKS4a Proxy in C# Blog /March 28, 2022 /Some time ago, I tweeted a te... 2022-3-29 03:50:53 | 阅读: 56 | 收藏 | rastamouse.me client proxy tokensource socks4 tcpclient

Protected: Adjacency List to Manage P2P Implants PatreonMany thanks to my Black Hat patrons:Ahmed Qadeer, War4uthor, Jatta, Jose Barrientos, Eric... 2022-2-21 23:56:40 | 阅读: 40 | 收藏 | rastamouse.me war4uthor joe huskyhacks suraj cameron

Dumping LSASS with Duplicated Handles Blog /December 27, 2021 /In the previous blog post,... 2021-12-28 04:20:8 | 阅读: 67 | 收藏 | rastamouse.me writeline mimikatz 1056

Protected: Duplicating Handles in C# PatreonMany thanks to my Black Hat patrons:Lény Bueno, Ty-reX, Suraj Khetani, Henrik, SV1, Kover... 2021-11-28 05:09:56 | 阅读: 46 | 收藏 | rastamouse.me eon huskyhacks bisht ghanta likith

Protected: ExternalC2.NET PatreonMany thanks to my Black Hat patrons:memN0ps, Seemant Bisht, digitalohm, Uri Binah, Robert... 2021-11-12 23:17:56 | 阅读: 48 | 收藏 | rastamouse.me fawaz svoboda khetani henrik sv1

D/Invoke Baguette Blog /November 1, 2021 /This post will introduce... 2021-11-01 23:21:33 | 阅读: 56 | 收藏 | rastamouse.me nuget dinvoke donutcore wiki vanilla

NTLM Relaying via Cobalt Strike Blog /July 29, 2021 /NTLM relaying is a popular att... 2021-10-31 21:43:45 | 阅读: 65 | 收藏 | rastamouse.me client portbender loaded machine beacon