Fallenangel666

Red Team / pentester / Research |CRTL (CRTO II) | CRTO | CRTP |
AVs/EDR/XDR ,malware and active directory enthusiast. CTF player FallenAngel666

[Fallenangel666 @FallenAngelC2]

Well, I've finally gotten around to it. I've decided to start a somewhat ambitious project: finishing the creation of Bahamut.

Bahamut is my personal custom agent for MythicC2, which focuses primarily on evading EDR/AV technologies.

[International Cyber Digest @IntCyberDigest]

‼️ A homebrew app called Overdrive turns jailbroken PS5s into a store of 1,669 games.

It hit GitHub on 9 October, 10 days after the Relapse jailbreak, and pulls games from file hosts like MediaFire.

[Fallenangel666 @FallenAngelC2]

Special thanks to @KlezVirus for Moonwalk++ kept the original SystemFunction032 + static "MyTest1" key and the same VP(RWX) → ENCRYPT → VP(NOACCESS) ladder.
Refs: https://t.co/wbGvi0wDFN / https://t.co/2YXIhvSH0T

[Fallenangel666 @FallenAngelC2]

I integrated Moonwalk++ into Bahamut: every WinHTTP call runs behind a spoofed caller chain while the agent's image is RC4-encrypted and PAGE_NOACCESS original SystemFunction032 + static "MyTest1" key.
#RedTeam #windows #EDR #C2 #cybersecurity

[Fallenangel666 @FallenAngelC2]

And the result is exactly what the technique promises: every WinHTTP call flies the encrypted circuit, WinDbg shows a clean 4-frame chain at WinHttpSendRequest while the code is unreadable (??), and check-in + tasking keep working.

[Prime Video Anime(プライムビデオアニメ) @PrimeVideoAnime]

劇場��『#チェンソーマン レゼ篇』
#プライムビデオでレゼ篇独占 配信記念

🎁リポストキャンペーン🎁
この投稿が合計1000リポストを超えたら
特別ビジュアルのスマホ待受画像を公開！

引用RPも大歓迎！
#レゼ篇独占 を付けてチェンソーマン愛を語り尽くそう！

[Fallenangel666 @FallenAngelC2]

And special thanks to @C5pider for recommending this technique to me
Refs: https://t.co/p2g6XVCcN3
https://t.co/GUvONrt4sz

[Fallenangel666 @FallenAngelC2]

I integrated LoudSunRun-style stack spoofing into Bahamut so direct API calls and indirect syscalls, which still execute from inside ntdll present a legitimate caller chain.
#RedTeam #windows #EDR #C2 #cybersecurity

[Fallenangel666 @FallenAngelC2]

And I’ve really liked the result, to be honest, it works very well when it comes to injection; the only thing that has been tricky to implement is that I’ve had to discard the original Starburst worker profile and use a thread without fail for this implementation.

[Pirat_Nation 🔴 @Pirat_Nation]

Yoko Taro says he made NieR: Automata the way he wanted, without a specific target audience from Square Enix.

“I just made what I wanted to, and I tried to stay hidden from Square Enix as much as possible.”

That clearly worked. NieR: Automata became a huge success, selling over 10 million copies and bringing the series to a much wider audience.

Taro also says he sees his games as pretty normal, despite their reputation for being strange:
“I think I am making normal games targeted towards normal people.”

[Traducciones Vacuno 🐮 @TradusVacuno]

¡Llegó el día! La traducción de DRAKENGARD 3 al español ya está DISPONIBLE, ¡tanto en emulador como en consola!

Muchas gracias a todos los que nos habéis apoyado, ¡ahora a jugar! 🌸🐲🐮

https://t.co/adUwsbhz4c

[Er1cT4n9 @Er1cT4n9]

真是安全已死，之前这种东西 得在 ida里面一点点地的抽丝剥茧，重命名函数来缓解混淆，干一会儿就头晕眼花想骂娘了。

而现在，你的对手不是人类，这种混淆完全无效...

[Smukx.E @5mukx]

Recurse: Agentic reverse engineering environment with Ghidra-class desktop app. Built with Tauri 2 on top of an existing RE toolchain: radare2 does all parsing, analysis, disassembly, xrefs, strings and imports; r2ghidra (optional) provides decompilation.

Github:- https://t.co/nyk5FmEx0i

[Fallenangel666 @FallenAngelC2]

Zilean is working properly in Bahamut !!!! It’s been a good experiment with Sleepmask as a replacement for Ekko. What’s more, there’s no documentation on Zilean (I think my AI assistant has got the blues and my hands are aching)#redteam #UDRL #mythicc2 #cybersecurity #C2 #windows

[5pider @C5pider]

New Release Havoc Professional 0.8: Leviathan 🩸

- Introducing Kaine User-Defined C2
- Expanded Linux post-ex capabilities
- Refactored port forwarding and sleep masking
- Enhanced .NET/PowerSafe execution
- In-Memory PE Execution and BOF-PE support
- HTTP/s Server Name Indication (SNI) Spoofing
- License Updates / Air-gapped licensing
- Havoc client UI overhaul & cross-platform support

Release Link Below🔗