Currently analyzing the leaks regarding conti gang. Found a file with a Mega account. PW is in the file too. I think I should not log into it right? :D.

Wrote a Windows kernel driver in Rust to read and write memory on request from a userland program, was pretty fun. I can recommend the Rust kernel Series from @0xfluxsec .

Just open-sourced my Rust-based Mythic agent. Huge thanks to @MalDevAcademy and @5mukx for the inspiration (and some solid code)! 🚀🦀.

Just implemented a pivot system where one agent can start listening on a port, and other agents can use that port for external connections to build redirector chains in restricted networks. It's quite fun to build a #C2 agent, I have to say :)

Just added that it can execute .NET applications in memory. Any ideas for other must-have features?

My Mythic Rust Agent now runs BOFs, together with the SOCKS Proxy it provides over the Teamserver it is basically able to do everything :)

The current version has almost no detections. Nice

My custom Mythic agent now supports SOCKS. It was a bit janky to build at first, but I'm quite happy with it now :)

Started a few days ago writing a Mythic agent in C for fun. Made some small progress—basic callback and inline shellcode execution :) Next step: dive into @vxunderground and read some fun stuff to implement.

RT @CerastIntel: 🚀 Big Update Coming in April!. We’re relaunching end of April 2025 with powerful new features:. 🔍 Full Database Search – F….

RT @CerastIntel: Found a leaked .env file during testing today — critical reminder to check for sensitive data exposure. 🚨 .Want to find it….

RT @CerastIntel: Super cool story about hacking hackers! 😎 Read it, learn from it, and definitely don’t try this yourself (or maybe do).….

RT @CerastIntel: 🚨 Heads up, devs! A malicious commit hit the lottie-player repo, causing pop-ups linked to a crypto scam. If you're using….

Hey @MalDevAcademy , currently thinking about buying the course. Is the content valid for Windows for ARM too? Shellcode might not be transferable, but the code and techniques should work on ARM64, right?.

RT @CerastIntel: Check out the latest security findings at 🚨. We uncover issues such as exposed keys/secrets/confi….

RT @CerastIntel: Want some free loot? Here a free first month: FREELOOT100

RT @NexusFuzzy: Well, I'm not advising you to do this but a lot of #Redline #Infostealer Command & Control servers have RDP exposed to the….

I am happy about every feedback and/or idea for the future of this project!.

The Operator of the UI never gets to see the full cracked password, and it is not stored anywhere.

The given account performance a #DCSync with impacket from @SecureAuth, so the account needs the permissions for synchronizations.

@hashcat is running with a standart wordlist and OneRuleToRuleThemAll from @notsosecure. You can exchange these files as you like or add custom words with the UI.