Rasta Mouse retweeted
Hopefully coming to Mythic v4 soon. Direct RDP and VNC functionality via Guacamole. No rportfwd involved, just a direct feed to Guacamole via a new interactive streaming mode from the mythic agent.
Might be a tough watch from a mobile device, so I'd recommend a larger screen.
Might be a tough watch from a mobile device, so I'd recommend a larger screen.
6
36
237
9,000
Rasta Mouse retweeted
Join Cobalt Strike & Outflank on Dec. 3 for a free, interactive workshop on reflective loader development with Crystal Palace and MSI-based delivery techniques.
Grab your spot today: register.gotowebinar.com/register/48528…
Grab your spot today: register.gotowebinar.com/register/48528…
0
14
77
3,658
Rasta Mouse retweeted
Coercion BOF via IPP printers 🖨️ Useful for relaying HTTP —> AD CS, LDAP, etc.
GitHub Link: github.com/sudonoodle/BOF…
GitHub Link: github.com/sudonoodle/BOF…
3
63
288
10,399
Rasta Mouse retweeted
BlackMagick-c2 is out. Links below, and livestream demo video will be posted soon.
Some features include:
- hot swappable comms protocols
- hot swappable sleep masks, including novel masks
- custom coff, ffi, and bytecode vm postex
- commercial c2 + grade evasion
- modular nly what you need
- every build truly PIC. deliver the way you want to
Some features include:
- hot swappable comms protocols
- hot swappable sleep masks, including novel masks
- custom coff, ffi, and bytecode vm postex
- commercial c2 + grade evasion
- modular nly what you need
- every build truly PIC. deliver the way you want to
5
19
93
41,694
😱😱😱
BREAKING: World's largest crypto exchange Binance hacked with over $5.6 billion stolen:
• $1.45 billion $BTC
• $875 million $ETH
• $234 million $TRX
• $50 million $XAUT
• $1.57 billion $USDT
• $823 million $USDC
• $75 million $WBETH
• $88.5 million $RLUSD
+ $447.5 tocurrencies
This is the largest hack in crypto history.
0
0
8
3,389
Rasta Mouse retweeted
Implemented SMB "reauth" from @aas_s3curity in my KreRelayEx tool too :-)
1
34
148
5,950
Rasta Mouse retweeted
Was reading a threat analysis report by @K7CyberSecurity and it motivated me to create a video about building an ISO to deliver a payload. Fun exercise leveraging techniques I learned from @_RastaMouse
youtu.be/s4TfC9Yz-lM
youtu.be/s4TfC9Yz-lM
0
2
2
743
Rasta Mouse retweeted
hashcat v8.0.0 released!
The largest update in the history of hashcat, with PCFG attacks, hash recipes that crack hashes without a hash-mode, and bcrypt on FPGA boards.
Release notes: github.com/hashcat/hashca…
Download: hashcat.net/hashcat/
The largest update in the history of hashcat, with PCFG attacks, hash recipes that crack hashes without a hash-mode, and bcrypt on FPGA boards.
Release notes: github.com/hashcat/hashca…
Download: hashcat.net/hashcat/
24
425
2,035
95,156
Rasta Mouse retweeted
🚨 EVILGINX EXTENSION IS OUT🚨
I am happy to say the free Evilginx Chrome extension has been approved and is finally available for download. 🥳
You can now safely import your captured session cookies, knowing that the cookie manager you're using came from a reputable source, e bro" quality seal.
For a long time, I wanted to make the task of finding the cookies that hold session tokens much easier.
With the Evilginx extension, you can now speed up the trial-and-error process when testing multiple cookie configurations to see whether you're still authenticated after a page reload (no more restoring cookie backups from external JSON files).
I made this extension for myself, and I use it to kickstart the development of every single phishlet I make. Now you can too! 💪
To properly celebrate the release and help you get the most out of the extension, I released a walkthrough video with a rundown of all the features and a hands-on tutorial on how to use it to kickstart the development of your own phishlet for GitHub.
Enjoy and happy phishing! 💗🪝🐟
Disclaimer: AI was used to develop the extension. UX, UI design, and minor code tweaks originated from a human brain. Code was read using human eyes.
P.S. GitHub repo will arrive later.
🔗 Links can be found below 👇
I am happy to say the free Evilginx Chrome extension has been approved and is finally available for download. 🥳
You can now safely import your captured session cookies, knowing that the cookie manager you're using came from a reputable source, e bro" quality seal.
For a long time, I wanted to make the task of finding the cookies that hold session tokens much easier.
With the Evilginx extension, you can now speed up the trial-and-error process when testing multiple cookie configurations to see whether you're still authenticated after a page reload (no more restoring cookie backups from external JSON files).
I made this extension for myself, and I use it to kickstart the development of every single phishlet I make. Now you can too! 💪
To properly celebrate the release and help you get the most out of the extension, I released a walkthrough video with a rundown of all the features and a hands-on tutorial on how to use it to kickstart the development of your own phishlet for GitHub.
Enjoy and happy phishing! 💗🪝🐟
Disclaimer: AI was used to develop the extension. UX, UI design, and minor code tweaks originated from a human brain. Code was read using human eyes.
P.S. GitHub repo will arrive later.
🔗 Links can be found below 👇
10
37
180
9,298
Rasta Mouse retweeted
Fox-IT’s full Cobalt Strike Beacon Corpus now available as an open dataset.
56,843 raw beacons + parsed configs from 190,182 sightings across 30,604 Team Servers, collected 2018–2026.
blog.fox-it.com/2026/10/13/rel…
56,843 raw beacons + parsed configs from 190,182 sightings across 30,604 Team Servers, collected 2018–2026.
blog.fox-it.com/2026/10/13/rel…
1
29
88
6,379
A minimum-wage worker in the UK must now work six days a week to match those on combined benefits. Absolute madness.
4
0
46
6,936
