Jakob

[Jakob @virtualloc]

Recently added an async ticket auto-renewal BOF to my tgt-monitor repo (https://t.co/p7hmjv4kAq). When the remaining ticket lifetime undershoots the specified threshold, a new TGT is requested and imported into the logon session.

[Jakob @virtualloc]

I will be speaking about Async BOFs and Conquest at #BSidesVienna on June 27th.

https://t.co/SJPOC0eTge

There is another free ticket drop next week, so grab one if you're in the area and let's have a chat there!

[BSidesVienna.at @BSidesVienna]

As promised, the final batch of #BSidesVienna tickets will be released on Wednesday, 17 June 2026 at 6 pm! Set your alarms, keep your browser open, and be ready to grab yours before they run out. https://t.co/kXxN83OoH7 And we have our first schedule: https://t.co/1J6g5jJ1sY

[S3cur3Th1sSh1t @ShitSecure]

After “The Art of Evasion” @x33fcon I’m publishing NimSyscallPacker to the public. This is the most advanced public Packer/Loader I’m aware of:

https://t.co/ftd24bHryj

[Jakob @virtualloc]

Created a variation of an async user logon monitor BOF. Supports monitoring logons to remote servers, as well as immediately saving access tokens in the token vault using an Conquest output handler. https://t.co/tcJTrKhGYL

[Jakob @virtualloc]

Implemented my own version of a port scanner as an Async BOF for Conquest, which scans for open ports in the background without blocking the agent. It also supports ranges and CIDR notation for targets and ports. https://t.co/ehbVd1MR7X

[Jakob @virtualloc]

Currently looking for new ideas and use-cases for async BOFs with long-running/monitor-like functionality. Feel free to drop suggestions for me here in the comments!

[Jakob @virtualloc]

Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage volumes. https://t.co/OxgsLPaU7n

[BSidesVienna.at @BSidesVienna]

It's official: #BSidesVienna 0x7EA will take place on 27 June 2026. The call for papers/workshops will be open soon. Thank you to all the sponsors who have offered their support to make this event possible at such short notice!

[Jakob @virtualloc]

Another day, another async BOF. With KeeLog, you can monitor KeePass instances and capture the master password as soon as its entered. https://t.co/ZSqKP5Ww1F

[Bad Sector Labs @badsectorlabs]

Gone are the days of risking a Rubeus monitor run (even via the amazing BOF[.]NET by @_EthicalChaos_ ) in your conquest beacon. @virtualloc is crushing it!

https://t.co/CckrSvvv43

[Jakob @virtualloc]

Been very interested in Async BOFs lately and implemented a few for use with Conquest. The first implements Rubeus monitor as a BOF and notifies when TGTs are collected. The second monitors for clipboard changes and returns them. https://t.co/p7hmjv4kAq https://t.co/Kdo9FG9Fba

[Jakob @virtualloc]

New Conquest Release! 👑

v0.2.0 features the following additions:

- SMB Listeners & Agents
- Powerful Python module system (examples: https://t.co/Y9PZEdAwuk)
- New payload types: .dll, .svc.exe
- File and Process Browser
- Multi-client support
- ...

https://t.co/oZScUhnf4I

[Jakob @virtualloc]

I decided to open-source Conquest, the C2 framework i have been working on for the last couple months. It is fully written in Nim and has several features built-in, including:
- GUI client
- Custom communication protocol
- Malleable C2 profiles
- …
https://t.co/kdgr1eGgFZ

[Jakob @virtualloc]

@BSidesVienna Would you be able to provide a rough estimation on when the first wave of tickets will be available?

[Jakob @virtualloc]

I've implemented a new project, which performs NTDLL unhooking from a suspended process by using indirect syscalls with the HellsHall technique. #maldev https://t.co/D2AmQfPpTk

[Jakob @virtualloc]

After completing the beginner and intermediary modules on Maldev Academy, I created my first evasive shellcode loader. It executes a payload using mapping injection via direct syscalls with Hell's Gate and includes several anti-analysis features. https://t.co/rsLesH4HeG #maldev