Darren

disassembler of gubbins, builder of awful things, breaker of worse things, herder of cats. father of drones.

[Darren @fullspectrumdev]

@Xaniken robes and cloaks would be sick tbh. I'd pay good money for that.

[Darren @fullspectrumdev]

There are ways and means to get around this, but they are vaguely effort-intensive and sufficiently annoying to not be worthwhile.
Like, what is there to gain anyway.

[solst/ICE of Astarte @IceSolst]

Another reason public wifi is fine: client isolation. Each device is basically on its own vlan.

[Darren @fullspectrumdev]

@avunit_1337 @UK_Daniel_Card "front or back"?

[Darren @fullspectrumdev]

@UK_Daniel_Card Taking any trains though? :D

[Darren @fullspectrumdev]

@sgodofsk From some experience asking the same questions at a smaller, similar facility: the designs being manufactured get revised/adjusted/iterated on far too rapidly for injection molding to be reasonably viable unless you could massively bring down the cost of making molds.

[Darren @fullspectrumdev]

@HackingLZ "What is old is (somehow) new again" I suppose.

[Darren @fullspectrumdev]

@Bennewman9 @UK_Daniel_Card sharing an OpenVPN config file? Jail.

[Darren @fullspectrumdev]

@0xLegacyy @vxunderground It is even earlier than that - 2010 or so, source code was published on a few malware writing forums at the time

[Darren @fullspectrumdev]

Something I am looking for since forever is a old copy of "H1N1 Loader" by Slayer616 that was published on an old forum (OpenSC, and some others). I wonder if any other VX archivist types have it? Or the Func-In RAT demos by DeadlyVermillion?
cc: @vxunderground

[Darren @fullspectrumdev]

@JoshuaBailey184 Long exposure. Even under nods in a dark sky area, while it looks fucking awesome, it isn't *that* without a long exposure.

[Darren @fullspectrumdev]

@0xTriboulet "if it works, it works". Trying the absolutely zero effort, stupid things right off the bat costs next to nothing and succeeds way too often.
No point in overthinking it in the early stages, and if it fails you still get some metrics probably.

[Darren @fullspectrumdev]

the amount of wins I get with ${off the shelf C2} in stock config or minimal alteration probably outweighs the amount of wins I get where I spend a shitload of effort making something extra super duper speshul for the engagement.
If you know, you know.

[Steve S. @0xTriboulet]

Same thing goes for C2s, but y’all aren’t ready for that conversation 🙈

[Darren @fullspectrumdev]

just fucking have someone make a yandex or gmail or whatever free-email and start sending low effort shit out on day 1 of the engagement.

while your coworkers are busy faffing around with indirect syscalls or sleep masks or whatever, you will probably get a shell, statistically

[Darren @fullspectrumdev]

one of my strongly held opinions in the game of "red teaming" is that you should try stupid, low effort, "an intern could do this/this will never work" shit right off the rip.

I mean.

It works all the goddamn time in the wild.

Obsession with "evasions" is brainworms.

[Darren @fullspectrumdev]

red team protip: just repeatedly spam them barely convincing emails linking to a page that serves an executable file and you will probably land a shell in an embarrassingly large number of engagements.

[Darren @fullspectrumdev]

@HackingLZ mans about to make fucking mad bank on affiliate codes for vpns by targeting the uk market.
what is old is new.

[Darren @fullspectrumdev]

also related: original copies of "Dangerous Kitten" or "/i/kit" or similar.

Needed for a history project a friends doing.

[Darren @fullspectrumdev]

@ravirockks @thegrugq They have been doing armed drones for a while, seen quite a few videos of drone drops/FPV from Mexico/etc in the last year or so.