Recently added an async ticket auto-renewal BOF to my tgt-monitor repo (github.com/jakobfriedl/tg…). When the remaining ticket lifetime undershoots the specified threshold, a new TGT is requested and imported into the logon session.
I will be speaking about Async BOFs and Conquest at #BSidesVienna on June 27th.
cfp.bsidesvienna.at/bsidesvienna-0…
There is another free ticket drop next week, so grab one if you're in the area and let's have a chat there!
After “The Art of Evasion” @x33fcon I’m publishing NimSyscallPacker to the public. This is the most advanced public Packer/Loader I’m aware of:
github.com/S3cur3Th1sSh1t…
Created a variation of an async user logon monitor BOF. Supports monitoring logons to remote servers, as well as immediately saving access tokens in the token vault using an Conquest output handler. github.com/jakobfriedl/lo…
Implemented my own version of a port scanner as an Async BOF for Conquest, which scans for open ports in the background without blocking the agent. It also supports ranges and CIDR notation for targets and ports. github.com/jakobfriedl/as…
Currently looking for new ideas and use-cases for async BOFs with long-running/monitor-like functionality. Feel free to drop suggestions for me here in the comments!
Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage volumes. github.com/jakobfriedl/us…
It's official: #BSidesVienna 0x7EA will take place on 27 June 2026. The call for papers/workshops will be open soon. Thank you to all the sponsors who have offered their support to make this event possible at such short notice!
Another day, another async BOF. With KeeLog, you can monitor KeePass instances and capture the master password as soon as its entered. github.com/jakobfriedl/ke…
Been very interested in Async BOFs lately and implemented a few for use with Conquest. The first implements Rubeus monitor as a BOF and notifies when TGTs are collected. The second monitors for clipboard changes and returns them. github.com/jakobfriedl/tg…github.com/jakobfriedl/cl…
New Conquest Release! 👑
v0.2.0 features the following additions:
- SMB Listeners & Agents
- Powerful Python module system (examples: github.com/jakobfriedl/co…)
- New payload types: .dll, .svc.exe
- File and Process Browser
- Multi-client support
- ...
github.com/jakobfriedl/co…
I decided to open-source Conquest, the C2 framework i have been working on for the last couple months. It is fully written in Nim and has several features built-in, including:
- GUI client
- Custom communication protocol
- Malleable C2 profiles
- …
github.com/jakobfriedl/co…
I've implemented a new project, which performs NTDLL unhooking from a suspended process by using indirect syscalls with the HellsHall technique. #maldevgithub.com/jakobfriedl/In…
After completing the beginner and intermediary modules on Maldev Academy, I created my first evasive shellcode loader. It executes a payload using mapping injection via direct syscalls with Hell's Gate and includes several anti-analysis features. github.com/jakobfriedl/Be…#maldev
302 Followers 4K FollowingThe @robang74 in its 2nd version X account, with a Moonwalker design, but still in gray. Because early releases are something to be ashamed of or too late! ;-)
2K Followers 1 FollowingSecurity company focusing on Microsoft Entra and Active Directory security. Need an expert view or pentest on your cloud/AD? [email protected]
2K Followers 67 FollowingLearn the skills to execute and evaluate agentic-assisted cybersecurity workflows across cloud, hybrid and AI-enabled environments. 🔗 https://t.co/184lAzbd09
79K Followers 762 FollowingEnd-to-end Cybersecurity consulting team leading the industry, supporting organizations, and giving back. #Hacktheplanet
Blogs, news, webinars, and tools!
17K Followers 3K FollowingCo-Founder of @CygentaHQ former head of cyber research @Raytheon - Keynote Speaker, ethical hacker and physical security specialist. Author of How I Rob Banks.
32K Followers 0 FollowingOfficial account for BruteRatelC4 | Developing the most powerful and sophisticated pentest software for Red Team engagements | DarkVortex founder/CEO
6K Followers 34 FollowingOfficial account for Cobalt Strike. Benchmark red teaming tool known for its flexibility and powerful user community. Follow for new releases and other updates.
3K Followers 1K FollowingFortra delivers AI-amplified data security software solutions that help organizations use and protect their data with confidence.
50K Followers 2K FollowingSpecializing in pen testing, red teaming, and Active SOC. We share our knowledge through blogs, webcasts, open-source tools, and Backdoors & Breaches game.
63K Followers 298 FollowingA kiwi coding mimikatz & kekeo
github: https://t.co/eS3LVgU6i0
Head of security services @banquedefrance
Tweets are my own and not the views of my employer
10K Followers 88 Followingbuilding solutions to secure worlds. all thoughts / opinions (if at all) are my own.
labs @thinkstcanary - prev. founder @deceptiq_ (acq.)
30K Followers 208 FollowingHacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.