5pider

5pider

@5pider.net

researcher and developer

184 followers2 following15 posts

5pider
@5pider.net

New Release Havoc Professional 0.8: Leviathan 馃└ - Introducing Kaine User-Defined C2 - Expanded Linux post-ex capabilities - Refactored port forwarding and sleep masking - Enhanced .NET/PowerSafe execution - In-Memory PE Execution and BOF-PE support Release: www.infinitycurve.org/blog/leviathan

infinitycurve.orgHavoc Professional 0.8: LeviathanIntroducing Kaine User-Defined C2, expanded Linux post-ex capabilities, refactored port forwarding and sleep masking, enhanced .NET/PowerSafe execution, Beacon Object File improvements, In-Memory PE E...
5pider
@5pider.net

Finally got around to getting a working PoC of my native object file to LLVM IR lifter. Started this small side-project to see how far can I push my own VM tech and perhaps transpiling existing tradecrafts, executables and post-ex toolings [1/3]

5pider
@5pider.net

by simply lifting them up to LLVM IR via remill and have them being recompiled into a format of my choosing such as my bytecode or even perform other passes on the IR and back to it's original format. [2/3]

5pider
@5pider.net

Still WIP but as least the lifting and recompilation works flawlessly. FYI the original obj file does not have the LLVM bitcode embedded, I want it to work on any native formats but for now object files should be sufficient 馃檭 [3/3]

5pider
@5pider.net

New Release: Havoc Professional 0.7 K-Noir 馃惡 New Linux implant for x86_64 and AArch64, Stack Spoofing related improvments such as CET compliance and a function rule system, new registry manipulation extension and injection based capabilities. Link: www.infinitycurve.org/blog/k-noir

infinitycurve.orgHavoc Professional 0.7: K-NoirAn introduction to Havoc Professional 0.7 K-Noir, featuring a new Linux implant for x86_64 and AArch64, CET compliant stack spoofing and rules systems, new Direct and P2P communication channels, new m...
5pider
@5pider.net

This means so much coming this from you Raphael! You have been a huge inspiration and ur work has been insanely inspiring to me for years and I always believed your methodology and philosophy to be the key and proper way of doing and designing malware and C2s 馃槃

This post is unavailable.
5pider
@5pider.net

I never expected to see my Stardust being mentioned here! This made me beyond happy and especially considering Raphael has been my biggest inspiration in this community since I started out at Infosec. Thanks a lot for these kind comments and mention. It truly made my day

This post is unavailable.

You are up to date.