Ghostwriter

[ʎppɐɯɔ @cmaddalena]

I offer a big thanks to @MRSchwassRobert for raising this issue!

[ʎppɐɯɔ @cmaddalena]

Hello! A @getghostwriter user raised a potential security issue with me. I investigated it, determined it required an immediate patch, and closed the issue in v3.1.4. I just published a detailed security advisory on the repo:

https://t.co/T4wvM2Yfp8

[ʎppɐɯɔ @cmaddalena]

I made a brief introductory video to @getghostwriter and it’s core features. Ghostwriter has grown so much over the years that it was challenging to keep this to ~10m without leaving anything out.

[ʎppɐɯɔ @cmaddalena]

There was a sneaky @getghostwriter release from @SpecterOps last week. I implemented some great new features as we gain momentum toward reporting enhancements coming soon!

Check out v3.1 here: https://t.co/jVonWxCyQA

[Ghostwriter @getghostwriter]

We just released v3.0.6 with a contribution from @ly4k_ and new health monitoring API endpoints. Check it out!

https://t.co/ZcUHsPz3kK

[ʎppɐɯɔ @cmaddalena]

For any @getghostwriter fans out there, new installations may get hung up being unable to build a dependency. The issue is in Python `setuptools` and there's an open PR that fixes it. Hopefully, it can be resolved soon. You can follow it here: https://t.co/T4VamAQa6u

[ʎppɐɯɔ @cmaddalena]

The @SpecterOps team is keen to announce the release of @getghostwriter v3.0.0 with the first release of the GraphQL API! We also have a new tool, Ghostwriter CLI! I'm pleased to have all these changes available for everyone now.

Read more about it here:

https://t.co/PYr7PqUzoS

[ʎppɐɯɔ @cmaddalena]

The @SpecterOps channel now has my presentation on @getghostwriter from last month’s Black Hat Asia. If you missed it live, check it out to learn about Ghostwriter and see a demo of the v2.3.0 release candidate!

https://t.co/Gq2hiw7Zqa

[ʎppɐɯɔ @cmaddalena]

These turned out so great! I asked Jordan to give our fun Ghostwriter ghost some more personality and everyone @SpecterOps is in love with these. Which one is your favorite? For me, I can’t decide between upper right and lower left. Happy ghost overload. Now I need some stickers.

[ʎppɐɯɔ @cmaddalena]

The @SpecterOps team has a new RC for Ghostwriter v2.2.3! Some good changes and enhancements in this one: https://t.co/wnMJsGDNuk

[Ghostwriter @getghostwriter]

We have a new release candidate for Ghostwriter! This v2.2.3-rc1 addresses several small to medium issues and includes some enhancements. Check it out here:

https://t.co/RkEpKfs2yt

[ʎppɐɯɔ @cmaddalena]

The @SpecterOps team put in a lot of work on @getghostwriter to build unit tests, setup a CI pipeline, and certify with CII. The project is poised for some great new features in 2022! We wrote a short post about our journey through 2021. Check it out!

https://t.co/UiVNIJJQo2

[Ghostwriter @getghostwriter]

@Shay94142899 You can mass import findings from a csv file. I don’t know of any open-source libraries of templates, but if you find one I’d love to know about it! I have seen some folks share report templates here and there, but don’t know of any in repos.

[Ghostwriter @getghostwriter]

On Friday, the @SpecterOps team released Ghostwriter v2.2.2! There are some great changes and enhancements in this one. Stability, quality of life additions, and some new features.

Check it out here: https://t.co/dd3uOIsbAX

[Ghostwriter @getghostwriter]

After a short hiatus for other work, the @SpecterOps team is back with the release candidate for @getghostwriter v2.2.2! We squashed some bugs and worked on improving reliability and code quality. More here: https://t.co/KjroDotHIj

[ʎppɐɯɔ @cmaddalena]

@SpecterOps @getghostwriter We also updated the README to call out our project supporters (https://t.co/Jf2XUmsbJ3). @SpecterOps is a huge supporter, of course. We also want to acknowledge @GitBookIO for hosting the wiki and giving us access to GitBook Community for FOSS to improve our documentation 🙏

[ʎppɐɯɔ @cmaddalena]

ICYMI on GitHub, the @SpecterOps team released v2.2.1 of @getghostwriter on Friday. This was a small release that addressed a reported bug and added a couple of requested features 👻✏️ https://t.co/awkt5I27vC

[ʎppɐɯɔ @cmaddalena]

Also, @AndrewChiles created standalone repositories for the mythic_sync and cobalt_sync utilities used for automatically sending logs to Ghostwriter from Mythic C2 and Cobalt Strike:

https://t.co/vz5ik8kaPB
https://t.co/MV2bzNr50h

[ʎppɐɯɔ @cmaddalena]

I'm happy to say @getghostwriter v2.2-rc1 has graduated to v2.2! The @specterops team cut the release last night: https://t.co/szUuCyT9K9

[ʎppɐɯɔ @cmaddalena]

The @SpecterOps team behind @getghostwriter has some big announcements tomorrow. We'll publish a blogpost on Friday morning, but don't miss our SO-CON 2020 presentation. Come join us for a look at some exciting new changes to Ghostwriter and Q&A!

https://t.co/TfiCoVAcjT