CIRCLE WITH A DOT

@kajer my first DC was 31 and while I loved it when I was there, I’ve heard a lot of older folks say it’s not the way it used to be.

I sold my copy of twilight imperium a few years ago and I just bought another copy because I age a love hate relationship with that game and apparently we’re on love.

I ain’t ever been to RSAC but people really don’t seem to like RSAC

@Viss one of our new guys found it and I was so, so happy.

@Viss the only one I have a picture of is we found a payload that overwrites a bootloader with flappy bird, I’ve got it as a one liner (and more) that I can send you

@Viss we’ve got new bootloader overwrites now too!

@Viss oh this is awful

@Viss they’re super nice! Only issue is that they’re written in C, so if they crash they take your payload down with it, but they’re designed to avoid cobalt strike’s fork and run behaviors. But generally speaking, it’s a stealthier way to expand C2 payloads.

@Viss pretty much any reasonably decent C2 can execute them now, even metasploit does!

@Viss beacon object files.

@Viss I should write bofs that do this.

@siliconshecky noooooooooo thank you.

@mttaggart what’s that?

@Viss you’re gonna love this, wiped then with intune after compromising Entra.

I am so excited for Midwest CCDC Regionals this weekend yall have no idea.

Hell yeah

Hell yeah

We have a lot of happy little beacons atm.

Meant to do payload dev for regionals in CCDC last night. Ended up doing hours of troubleshooting a busted python package for apt because the python2 and python 3 version of the same package modified the same files 🫩

@shellsharks @mttaggart @neatnik

Wonder if I could put content in well known on ghost.