PatchRequest @PatchRequest

Tweets

133
Followers

86
Following

396
Likes

225

Cerast Intelligence @CerastIntel

3 days ago

Sneak Peek of what’s coming October 1st Be ready | millions of never-before-seen exposed files will become searchable cerast-intelligence.com

1 1 7 332 0

Download Image

PatchRequest @PatchRequest

2 weeks ago

Injecting a DLL into every process and overwriting WinAPI functions can easily go wrong. My anti-cheat crashed the PC with the pop-ups :) Is this technique a thing for anti-cheats? I mainly know it from EDR and AV github.com/PatchRequest/O…

0 0 0 31 0

Download Image

PatchRequest @PatchRequest

3 weeks ago

I think scoring applications based on ProcAge, ExeAge, and their behavior is a valid approach to determine whether it’s just Task Manager requesting a handle for the billionth time or a Python CreateRemoteThread PoC github.com/PatchRequest/O…

0 0 0 33 1

Download Image

PatchRequest @PatchRequest

4 weeks ago

Second detection: when somebody requests a handle to my protected process, I can react to it. github.com/PatchRequest/O…

0 0 2 45 1

Download Image

PatchRequest @PatchRequest

4 weeks ago

Started detecting remote thread creation, pretty cool if you ask me :) At first I was confused until I realized my notify routine runs in the process context of the invoker, then it was pretty easy to detect github.com/PatchRequest/O…

0 0 0 36 1

Download Image

PatchRequest @PatchRequest

4 weeks ago

Cleaned up a lot of the com stuff and now I use a minifilter communication port with custom structs to send userland telemetry about: - OB callbacks (handle operations) - Process/Thread notify routines - Minifilter I/O events (create, read, write) github.com/PatchRequest/O…

0 0 2 45 1

Download Image

PatchRequest @PatchRequest

2 months ago

Just added screenshot capability to my Mythic agent. It captures the screen using GDI (BitBlt into a bitmap), extracts raw pixels with GetDIBits, and encodes them as PNG. Anyone know a good method to take screenshots that aren't monitored by EDRs? #maldev github.com/PatchRequest/K…

0 0 2 96 1

Download Image

PatchRequest @PatchRequest

3 months ago

Wrote a Windows kernel driver in Rust to read and write memory on request from a userland program, was pretty fun. I can recommend the Rust kernel Series from @0xfluxsec fluxsec.red

0 3 11 974 6

Download Image

PatchRequest @PatchRequest

4 months ago

Just open-sourced my Rust-based Mythic agent. Huge thanks to @MalDevAcademy and @5mukx for the inspiration (and some solid code)! 🚀🦀 github.com/PatchRequest/K…

0 0 4 112 1

PatchRequest @PatchRequest

4 months ago

Just implemented a pivot system where one agent can start listening on a port, and other agents can use that port for external connections to build redirector chains in restricted networks. It's quite fun to build a #C2 agent, I have to say :)

0 0 1 80 0

Download Image

PatchRequest @PatchRequest

4 months ago

Just added that it can execute .NET applications in memory. Any ideas for other must-have features?

0 0 0 40 0

Download Image

PatchRequest @PatchRequest

4 months ago

My Mythic Rust Agent now runs BOFs, together with the SOCKS Proxy it provides over the Teamserver it is basically able to do everything :)

0 0 1 50 0

Download Image

PatchRequest @PatchRequest

5 months ago

Started a few days ago writing a Mythic agent in C for fun. Made some small progress—basic callback and inline shellcode execution :) Next step: dive into @vxunderground and read some fun stuff to implement.

0 0 0 170 0

Download Image

Cerast Intelligence @CerastIntel

8 months ago

Found a leaked .env file during testing today — critical reminder to check for sensitive data exposure. 🚨 Want to find it too? 👉 cerast-intelligence.com

0 1 3 372 1

Download Image

Cerast Intelligence @CerastIntel

10 months ago

Super cool story about hacking hackers! 😎 Read it, learn from it, and definitely don’t try this yourself (or maybe do). 🕵️‍♂️🔥 #Infosec medium.com/@corneacristia…

0 1 2 247 1

Cerast Intelligence @CerastIntel

11 months ago

🚨 Heads up, devs! A malicious commit hit the lottie-player repo, causing pop-ups linked to a crypto scam. If you're using it, double-check your dependencies and update ASAP! Stay sharp out there. github.com/LottieFiles/lo… #infosec #cybersecurity #Web3 #crypto #scam #lottieplayer…

3 14 25 5K 5

Download Image

PatchRequest @PatchRequest

a year ago

Hey @MalDevAcademy , currently thinking about buying the course. Is the content valid for Windows for ARM too? Shellcode might not be transferable, but the code and techniques should work on ARM64, right?

0 0 1 169 0

Cerast Intelligence @CerastIntel

a year ago

Check out the latest security findings at cerast-intelligence.com! 🚨 We uncover issues such as exposed keys/secrets/configs, misconfigured frameworks like WordPress, outdated versions of SSH/FTP, and much more. You can use these findings for bug bounties, security research, or…