41554 blogs · [ { "id": "01a087d9-4958-7324-b914-b106d6e979b5", "title": "Using Slack links-preview to smuggle C2 in locked-down environments.", "url": "https://rwxstoned.github.io/2026-06-18-Slack-links-preview-for-C2/", "published_at": "2026-06-18T04:00:00+00:00" }, { "id": "01a087d9-4958-7324-b914-b106d7889adc", "title": "My Beacon 2025 Talk on User-Defined Reflective Loader", "url": "https://rwxstoned.github.io/2025-11-19-beacon-UDRL-intro/", "published_at": "2025-11-19T05:00:00+00:00" }, { "id": "01a087d9-4958-7324-b914-b106d79efe97", "title": "My x33fcon 2025 Talk on Code Injection", "url": "https://rwxstoned.github.io/2025-09-09-x33fcon/", "published_at": "2025-09-09T04:00:00+00:00" }, { "id": "01a087d9-4958-7324-b914-b106d880ae1a", "title": "Making the Debugging of UDRLs (a bit) Easier", "url": "https://rwxstoned.github.io/2025-07-06-Better-debugging-UDRL/", "published_at": "2025-07-06T04:00:00+00:00" }, { "id": "01a087d9-4958-7324-b914-b106d93805ed", "title": "How is my Browser blocking RWX execution ?", "url": "https://rwxstoned.github.io/2025-01-04-Reviewing-browser-hooks/", "published_at": "2025-01-04T05:00:00+00:00" }, { "id": "01a087d9-4958-7324-b914-b106d9d0c5ec", "title": "Introducing GimmeShelter.py", "url": "https://rwxstoned.github.io/2024-12-06-GimmeShelter/", "published_at": "2024-12-06T05:00:00+00:00" }, { "id": "01a087d9-4958-7324-b914-b106d9f35376", "title": "BeaconGate, Sleepmask... customizing Cobalt Strike after 4.10", "url": "https://rwxstoned.github.io/2024-11-13-Cobalt-Strike-customization/", "published_at": "2024-11-13T05:00:00+00:00" }, { "id": "01a087d9-4958-7324-b914-b106da008d80", "title": "An RTO2 Review", "url": "https://rwxstoned.github.io/2024-11-07-RTO2-review/", "published_at": "2024-11-07T05:00:00+00:00" }, { "id": "01a087d9-4958-7324-b914-b106da49dd44", "title": "MANDIANT CAPA for Red Teams", "url": "https://rwxstoned.github.io/2024-10-27-CAPA-for-red-teams/", "published_at": "2024-10-27T04:00:00+00:00" } ] posts Claim your blog

Blog · corpus.blog/blogs/rwxstoned.github.io/posts