REDxRANGER

Red Team

[REDxRANGER @dx_ranger]

Custom C# Stager that works with Cobalt Strike staged Payloads: https://t.co/7v6S2pUGhl

[Perly 🦈 @_Shark_byte]

I compiled over 11k bug bounty reports into one library

a little bit ago, I wanted to run some analysis on bounty reports, but had a hard time finding and compiling everything especially across platforms

so I decided to just make a library + api for anyone who wants to run any sort of tests/analysis etc

lemme know what yall think + anything to add to make it as useful as possible :)

link in replies

[BytecodeAssassin @oneandonlyhusam]

This might be the most insane C Compiler I've ever seen in my life.

It turns C Code into Turing-complete single instruction assembly code with MOV only. It would be a nightmare to sift through malware compiled with this thing. @xoreaxeaxeax is so cracked.

https://t.co/y02eyiEUOn

[Mysk 🇨🇦🇩🇪 @mysk_co]

@PlayStation Cool, so in the future we should expect an email like this:

[Binni Shah @binitamshah]

Deep Sea Phishing : Making Your Malware Look Legit to Bypasses EDR (Part 2) : https://t.co/X5PwZPwq0z

Part. 1 : How to Bypass EDR With Custom Payloads : https://t.co/24iyETktXc

[Fawaz Almutairi - بوجابر @q8fawazo]

It's been two years since I created Airstrike as a stage0 c2 template

I've finally had time to update it recently by dockerizing the project and adding a new rust agent for testing

Check it out and let me know what should I improve / add !

https://t.co/iWpEk5CvHi

[REDxRANGER @dx_ranger]

@mttaggart Very aesthetic

[SEKTOR7 Institute @SEKTOR7net]

New RTO course released.

Enjoy!
https://t.co/KxLh2nXgso

#RTO #redteam #onlinelearning

[5pider @C5pider]

The Havoc Framework
https://t.co/eBpOaicsI6

[mr.d0x @mrd0x]

Chromium's application mode can be used to easily build realistic phishing desktop applications. Enjoy.

https://t.co/rUolWjd5Ch

[Cas van Cooten @chvancooten]

Kicked off my "MalDev for Dummies" workshop successfully yesterday, which means the repo is now public! Slides, exercises, example code and resources to get you started on your malware development journey. C# and Nim supported for now. Enjoy!!
https://t.co/Z8aQ41QvHQ

[S3cur3Th1sSh1t @ShitSecure]

Another AMSI bypass alternative, usable from for example C++/C/Nim binaries as amsi.dll is not loaded there by default:

https://t.co/4isRAszjLC

[REDxRANGER @dx_ranger]

@ricca9380 @binitamshah @IntezerLabs @herrcore @seanmw Thank you

[Check Point Research @_CPResearch_]

Confirmed! TEARDROP the memory-only dropper from the #SUNBURST attack was uploaded to VirusTotal and available for analysis.
https://t.co/L5ohwFL2YZ

[Shogun Lab @shogun_lab]

I’m excited to finally release a short book that’s about building C2 implants in C++. I hope it can serve as an educational resource for those in Red Teams who want to get started writing their own implants and related C2 components.

You can read it here: https://t.co/CMyRXtSO46

[SpecterOps @SpecterOps]

Here is the link to the SpecterOps Adversary Tactics: PowerShell course material:

https://t.co/XvYUFmS48y

Enjoy!

For information about our current training offerings, information can be found here: https://t.co/vgSHK78qaI
(4/4)

[Mauricio Velazco @mvelazco]

releasing the materials (source, slides & lab guide) for the @defcon workshop by @olindoverrillo and I: Writing custom backdoor payloads with c#. Hope you can learn and have fun as much as we did.
https://t.co/tWCYq7ZV2k

[Jackson T. @Jackson_T]

Introducing SysWhispers, a tool that helps with AV/EDR evasion by using direct system calls to bypass user-mode API hooks. It works by generating header/ASM pairs supporting all core syscalls from Windows XP to 10.

Check it out here with examples: https://t.co/88hj5f53iX

[Jason Lang @curi0usJack]

Red Team Operations video series with Cobalt Strike 4.0 looks *amazing*.

https://t.co/urWJVqhh82

[spotheplanet @spotheplanet]

New study notes on PE backdooring:
https://t.co/OQznCIooaY