@RedTeamRonin

NULL

 🌍
Joined November 2020
  • Tweets1.4K
  • Following7
  • Followers196
341Media
V2Ugd2luIHRvZ2V0aGVyLCB3ZSBsb3NlIHRvZ2V0aGVy
[BLOG] This post summarises how to tie Cobalt Strike's UDRL, SleepMask, and BeaconGate together for your syscall and call stack spoofing needs. rastamouse.me/udrl-sleepmask…

UDRL, SleepMask, and BeaconGate

I've been looking into Cobalt Strike's UDRL, SleepMask, and BeaconGate features over the last couple of days. It took me some time to understand the relationship between these capabilities, so the...

rastamouse.me
6
102
1
253
25,336
A morning of IaC followed by 4 flags into Offshore in HTB.
58
Ronin retweeted
Mayfly@M4yFly29 Nov 2024
Goad v3 merged into the main branch 🥳 Github : github.com/Orange-Cyberdefen… Doc : orange-cyberdefense.github.i…
20
157
3
551
37,565
In a somewhat recent project we used a vulnerable driver, which worked fine... Except: The customer had a custom rule that caused an alert when a service is created! Decided to write a tool that creates the registry keys and calls into NtLoadDriver: github.com/ioncodes/SilentLo…

GitHub - ioncodes/SilentLoad: "Service-less" driver loading

"Service-less" driver loading. Contribute to ioncodes/SilentLoad development by creating an account on GitHub.

github.com
4
36
124
11,220
Windows User Space Emulator : A high-performance Windows process emulator that operates at the syscall level, providing full control over process execution through comprehensive hooking capabilities : Fake It 'til We Make It : The Art of Windows User Space Emulation : youtube.com/watch?v=Y6NXwI7x… Slides : docs.google.com/presentation… credits @momo5502
2
48
216
19,254
🤣 it’s been a while
53
Cooking almost done! Announcement coming out soon... #redteam #maldev
15
40
1
274
17,684
It’s a wild feeling to apply for a principle red team role and get insta rejected. Like meeting all the requirements by their checkboxes and quick enough that I seriously doubt a human looked at the submission.
1
2
120
Anxiety rising up like 13 ghosts. Generally happens a few days before a 100 miler. About 41 hours until race start. Once race day comes, it washes away. The start line for me represents calm. 🏃‍➡️
54
Tools can be extremely useful. You can use one tool over another to help alleviate pain points. When you are building a deck, you still need to know what double shear, beam span, cantilever, etc are. Same in the infosec world. Tools can help but there's a lot to still know.
109
Slightly obscure reference to my work:
1
158
2
79
Spent 16 hours volunteering on the Superior Hiking Trail. About 9 hours driving over 2 days to do this as well.
5
117
100 mile buckles. Not given, earned.
1
77
🚨 NEW CONTEST! 🚨 @NordicTweets is calling upon the community to create an innovative, human-centered, Matter-ready smart home application utilizing the nRF7002 DK or an nRF5340-based kit. Have an idea? Apply now for free hardware to bring it to life! bit.ly/nordicmatter
3
15
3,408
All the jumpers. Now for something completely different.
142
3
122
I need some more music for my running playlist. It’s currently 13 hours long. What are you running to? Here’s a small sample of what I have currently:
110
The logic board in a MacBook Air is tiny. I didn’t realize it was that small. Also successfully replaced the keyboard. It’s a pain in the ass and there’s no using the old one.
1
3
288
Load more