RythmStick @_RythmStick

rythmstick.net Joined January 2017

Tweets

230
Followers

365
Following

127
Likes

173

Rasta Mouse @_RastaMouse

10 months ago

Some pretty cool OPSEC-specific challenge labs coming to RTO soon (hopefully 🤞🏻)

20 45 481 24K 102

Download Image

My company @ogSecConsulting has partnered with @zeropointsecltd to create some essential report writing training. It will not just boost your writing skills but also the efficiency & quality of your assessments. Check out what's covered in the course here: training.zeropointsecurity.co.uk/courses/the-ar…

4 34 115 20K 52

Rasta Mouse @_RastaMouse

2 years ago

[BLOG] Very short post containing some guidance on how to deal with ANYSIZE_ARRAY structures in C#. rastamouse.me/anysize-array-…

0 2 33 5K 5

Rasta Mouse @_RastaMouse

2 years ago

[BLOG] First post of 2024. Why, as a C# dev, you should use SafeHandle classes instead of IntPtr's. rastamouse.me/safehandle-vs-…

3 29 112 17K 43

Rasta Mouse @_RastaMouse

2 years ago

Is writing a custom programming language specifically designed for windows malware dev a good or crazy idea...?

28 3 113 50K 11

zseano @zseano

2 years ago

recommend adding this JS code as a bookmark and using it as you browse your target, it's so simple yet very effective. it's helped me discover new endpoints i haven't seen before and overall helped increase my attack surface. thx @renniepak for sharing :)

5 80 404 49K 275

Rasta Mouse @_RastaMouse

2 years ago

It's kinda funny listening to @thecybermentor talk about tools that I wrote because I was bored. I would have put more effort into them if I knew they were going to be used.

TCM Security @TCMSecurity

2 years ago

It's kinda funny listening to @thecybermentor talk about tools that I wrote because I was bored. I would have put more effort into them if I knew they were going to be used.

7 40 201 31K 40

Download Image

2 4 67 12K 9

Zero-Point Security @_ZeroPointSec

2 years ago

Zero-Point Security is now a registered trade mark. trademarks.ipo.gov.uk/ipo-tmcase/pag…

1 2 73 11K 3

Zero-Point Security @_ZeroPointSec

2 years ago

We're happy to be sponsoring @HackSpaceCon 23. Did someone say pool party? #hackspacecon

0 64 27 11K 0

Rasta Mouse @_RastaMouse

3 years ago

SharpC2 finally has some documentation. sharpc2.readthedocs.io/en/latest/

1 19 95 16K 21

Rasta Mouse @_RastaMouse

3 years ago

P2P implants are now working in the #SharpC2 MAUI client. Code is in the dev branch for anybody interested. github.com/rasta-mouse/Sh…

1 15 90 16K 15

Download Image

Oliver Lyak @ly4k_

3 years ago

Today we're publishing new techniques for recovering NTLM hashes from encrypted credentials protected by Windows Defender Credential Guard. These techniques also work on victims logged on before the server was compromised. research.ifcr.dk/pass-the-chall…

34 686 2K 215K 507

Rasta Mouse @_RastaMouse

3 years ago

[BLOG] Short post on alternate ways to impersonate access tokens in C#, including in other threads. Thanks @GuhnooPlusLinux for providing the inspiration. rastamouse.me/token-imperson…

1 35 82 10K 14

CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 @_EthicalChaos_

3 years ago

It's happening, seems my talk was accepted by @BSidesCymru. Now I just need to accept 💩 😬.

3 5 57 0 2

Download Image

Rasta Mouse @_RastaMouse

3 years ago

[BLOG] Short post on using the different methods for getting a Domain object in .NET and why you should care in your tools. rastamouse.me/getdomain-vs-g…

5 34 112 0 22

Adam Chester 🏴‍☠️{AFK} @_xpn_

3 years ago

Quick blog post after spending the weekend looking at how Azure auth tokens are loaded into Office, how we can recover them from the Token Broker cache, and some MSA authentication RPC internals thrown in for good measure. blog.xpnsec.com/wam-bam/

10 177 381 0 75

Rasta Mouse @_RastaMouse

3 years ago

I made an experimental fork of @_EthicalChaos_'s MinHook.NET project. Basically, just replaced the use of P/Invoke with D/Invoke and Win32 APIs with Nt APIs. There are lots of untested code paths, so YMMV. github.com/rasta-mouse/Mi…

3 53 146 0 20

Rio @0x09AL

3 years ago

After an unhealthy amount of hours put into this, I finally managed to get RCE on Cobalt Strike. I would recommend avoiding it for a while as CVE-2022-39197 is not sufficient.

25 330 1K 0 107

Download Image

Rasta Mouse @_RastaMouse

3 years ago

Just finishing off the new revamped RTO course & lab. People often ask how long it takes to put this shit together. I've currently clocked in 167 hours, and I've still got video recording and editing to do.