corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0d50e-360c-71df-8f10-3922a8c1e700

Post-ex Weaponization: An Oral History

aff-wg.org · published 10 April 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at aff-wg.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
43
Words captured
524

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.elastic.co/security-labs/detonating-beacons-to-illuminate-detection-gaps
elastic.co
https://www.youtube.com/watch?v=q5pA49C7QJg
youtube.com
https://www.youtube.com/watch?v=DYWPtt7qszY
youtube.com
https://github.com/PowerShellMafia/PowerSploit
github.com
https://github.com/samratashok/nishang
github.com
https://github.com/PowerShellEmpire/PowerTools
github.com
https://www.youtube.com/watch?v=2manBaoP7Bk
youtube.com
https://blog.harmj0y.net/powershell/derbycon-powershell-weaponization/
blog.harmj0y.net
https://www.cobaltstrike.com/blog/cobalt-strike-2-1-i-have-the-powershell
cobaltstrike.com
https://www.cobaltstrike.com/blog/the-aggressor-project-preview
cobaltstrike.com
https://www.youtube.com/watch?v=26PedM_-zRo
youtube.com
https://github.com/stephenfewer/ReflectiveDLLInjection
github.com
https://github.com/rapid7/metasploit-framework/wiki/Using-ReflectiveDLL-Injection/98d7df3acd280a543fc6bdc727589a60553cb133
github.com
https://youtu.be/oOIdvPtuy5U?si=a70eEo1OZ638ilAC&t=300
youtu.be
https://hstechdocs.helpsystems.com/manuals/cobaltstrike/current/userguide/content/topics_aggressor-scripts/as-resources_functions.htm
hstechdocs.helpsystems.com
https://web.archive.org/web/20150316210158/https://www.ethicalhacker.net/features/root/course-review-dark-side-ops-custom-penetration-testing
web.archive.org
https://github.com/leechristensen/UnmanagedPowerShell
github.com
https://web.archive.org/web/20190508170150/https:/silentbreaksecurity.com/powershell-jobs-without-powershell-exe/
web.archive.org
https://web.archive.org/web/20160327101330/https:/www.sixdub.net/?p=367
web.archive.org
https://www.cobaltstrike.com/blog/cobalt-strike-3-3-now-with-less-powershell-exe
cobaltstrike.com
https://www.cobaltstrike.com/blog/modern-defenses-and-you
cobaltstrike.com
https://github.com/eladshamir/Internal-Monologue
github.com
https://posts.specterops.io/introducing-sharpsploit-a-c-post-exploitation-library-5c7be5f16c51
posts.specterops.io
https://www.cobaltstrike.com/blog/cobalt-strike-3-11-the-snake-that-eats-its-tail
cobaltstrike.com
https://posts.specterops.io/ghostpack-d835018c5fc4
posts.specterops.io
https://devblogs.microsoft.com/dotnet/announcing-net-framework-4-8-early-access-build-3694/
devblogs.microsoft.com
https://www.cobaltstrike.com/blog/why-is-notepad-exe-connecting-to-the-internet
cobaltstrike.com
https://www.cobaltstrike.com/blog/why-is-rundll32-exe-connecting-to-the-internet
cobaltstrike.com
https://blog.didierstevens.com/2009/11/22/quickpost-selectmyparent-or-playing-with-the-windows-process-tree/
blog.didierstevens.com
https://blog.didierstevens.com/2017/03/20/that-is-not-my-child-process/
blog.didierstevens.com
https://www.cobaltstrike.com/blog/cobalt-strike-3-8-whos-your-daddy
cobaltstrike.com
https://www.cobaltstrike.com/blog/cobalt-strikes-process-injection-the-details-cobalt-strike
cobaltstrike.com
Protecting Your Malware with blockdlls and ACG Read at the source ↗
blog.xpnsec.com
http://cobaltstrike.com/blog/in-memory-evasion
cobaltstrike.com
https://web.archive.org/web/20210305190309/http://www.exploit-monday.com/2013/08/writing-optimized-windows-shellcode-in-c.html
web.archive.org
https://web.archive.org/web/20210227202914/https://blog.cobaltstrike.com/2020/06/25/cobalt-strike-4-1-the-mark-of-injection/
web.archive.org
https://trustedsec.com/blog/a-developers-introduction-to-beacon-object-files
trustedsec.com
https://web.archive.org/web/20210421055448/https://blog.cobaltstrike.com/2020/09/17/beacon-object-file-adventures-some-zerologon-smbghost-and-situational-awareness/
web.archive.org
https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software
blogs.blackberry.com
https://web.archive.org/web/20210302051244/https://blog.cobaltstrike.com/2021/01/13/pushing-back-on-userland-hooks-with-cobalt-strike/
web.archive.org
https://trustedsec.com/blog/coffloader-building-your-own-in-memory-loader-or-how-to-run-bofs
trustedsec.com
https://www.elastic.co/security-labs/behavior-rule-bug-bounty
elastic.co
https://youtu.be/riIcnnBxEys?si=9vW7np38mtsr2w6U&t=2642
youtu.be