Aryan_Jogia retweeted
🐭 "When the Mouse Eats the Cat." 🐱 The C2 landscape is dominated by Go, C#, and Nim. @theaether4 built M0us3 in Rust instead, with an interactive Python C2 controlling the multi-session implant. Fresh language, fresh angle.
2
3
1,012
Hello everyone!
I'm excited to announce my topmate.io page where you can book a 1:1 call or ask any queries you may have. Whether you need help with my areas of expertise, or just want to chat anything , I'm available.
I'm looking forward to hearing from you.
1
44
Thrilled to share that I will be giving a workshop 'Playing the Game of Tag with Modern Day AV and EDRs - A Guide to Evading the Watchdogs' with at @bsidesahmedabad on 12th of October 2024.
See you all there!!
🎯 Ever wanted to play hide and seek… with your antivirus? 😏 Well, get ready to dodge, duck, and outwit the modern-day watchdogs like a pro! 🕶️
🔥 "Playing the Game of Tag with Modern Day AV and EDRs - A Guide to Evading the Watchdogs" is about to flip the script on everything you thought you knew about staying under the radar! 🚨
⚡️ Join Aryan Jogia and Chetanya Kunndra, a security researchers, as they unravel the secrets of bypassing the toughest AV and EDR systems out there.
💻 Can you outsmart the system, or will the system outsmart you? Only one way to find out! 💥
🚨 Get ready for an adrenaline-pumping ride that’ll make you question if you’re really that safe online! 🕵️♂️🔥
🎟️ Secure your pass here: konfhub.com/security-bsides-…
#BSidesAhmedabad #OutsmartAV #TechTalk #InfosecAdventure #EDRBattle #CatchMeIfYouCan #CyberWarfare #SecurityResearch
118
Loved all the threads
And lastly a mention of the yara rule in the FE blog. By default, all of the available channels are baked into generated C3 implants (aka Relays). Hence why, for example, the “Dropbox-API-Arg” string is present, along with the ODBC dll which is for (iirc) an MSSQL channel. (6/7)
