yamakadi

@_RastaMouse About 5 minutes before I find the thing

How long before you admit to yourself that something is lost, it's not coming back, and you just need to buy a new one...?

@kyleavery @modexpblog The credits are definitely missing your name. I referenced a few articles for this example but your well-structured and clearly commented code is what made it work.

@modexpblog @_yamakadi Planned to publish a short post on this topic today… never hit send. 🙃 Maybe tomorrow

I have added an example for patching “Environment.Exit” to ClrOxide. You can keep the overeager to exit assemblies from crashing your processes now. 🤩 github.com/yamakadi/clrox…

@Octoberfest73 Price is usually less of an issue than the amount of red tape. Anything less than $500 with a one time payment option and a vague invoice is easier as a one off charge than a formal process that could take months and not even get approved. Consulting in Japan 😭

Broad question: how much would you/your org be willing to pay as a one-time fee to access a high quality offensive security tool via private GitHub page? $50-100? I figure with a sponsership model a lot of folks will pay for a month, grab all the code, and cancel anyways

@trickster012 ｡ﾟ(ﾟ´Д｀ﾟ)ﾟ｡

@_yamakadi No i dont think it is :/

A year ago or so someone made a blogpost about execution on azure hosts via Azure function apps if my memory serves me right, which would make a weird graph with a trigger to execute some code like powershell. anyone remembers? I can't remember or find it and i am pissed!

Hacker summer camp fomo *engage*

@HakaiOffsec @memN0ps Great job! 😁 I couldn’t get around to releasing the fixed version of ldr and now I don’t have to 😆

After some hard work, coffee has been released! Our newest Rust COFF Loader! If you want to check it out: github.com/hakaioffsec/co… Don’t forget to check our blog post for more details: labs.hakaioffsec.com/coffee-a-coff-…

@chvancooten @_RastaMouse @_xpn_ Windows is the best advertisement for MacOS :D

@_yamakadi @_RastaMouse @_xpn_

@_xpn_ if I was crazy enough to get a Mac for dev work, what would you go for? Doesn't need to be portable so desktop or laptop is fine.

@chvancooten @_RastaMouse @_xpn_ JetBrains Rider 😏 Best C# development experience is on MacOS 😈

@_RastaMouse @_xpn_ How you gonna write your C# on a Mac 😤😤

@chvancooten @lpha3ch0 This is possible but awkward in rust and no guarantees for what kind of data you might end up with until trying to compile and making sense of the errors. Nim really makes you appreciate it the farther you are away from it 😂

@lpha3ch0 People working in languages that don't have compile time preprocessing support reading this tweet be like

This is why I previously used slurp() in Nim to store a base64 encoded byte array of shellcode and then reverse the array, at compile time. Base64 is low entropy: const letters = slurp('sc.bin').encode().reverse()

@chvancooten 😂😂

@_yamakadi Got your order wrong there buddy 😂😂

This should be fun 👀

@Kharosx0 @Teach2Breach @memN0ps @trickster012 Sorry I missed this! Thank you for checking it out! I’ll go over it again! 😊

@Teach2Breach @_yamakadi @memN0ps @trickster012 Its a common bug, easy to mix up

While I have some attention with ClrOxide, would anyone want to take a look at this and figure out why it’s not working? github.com/yamakadi/ldr @memN0ps @trickster012

An ordinary day in Istanbul

Credits to @C5pider and @R0h1rr1m by the way, and good folks at @TrustedSec. I’ve referenced their work thoroughly, and my code is basically CoffeeLdr in rust, but it’s missing something to actually make it work 😭

Huge shout-out to @chvancooten for forcing me to start on this by allowing risky commands into NimPlant, and @_Kudaes_ and @ropnop whose dinvoke_rs and go-clr libraries helped make things finally click!

I started on this two years ago, while trying to mimic NimPlant's execute-assembly command for the v1 rust implant, had some working versions, and even tried just using Nim to do execute-assembly and pass data through FFI.

Hi everyone! I've just released ClrOxide, a rust library that allows you to host the CLR and execute dotnet binaries. 😁 Your Rust C2's can finally do execute-assembly now 😜 github.com/yamakadi/clrox… / crates.io/crates/clroxide