Pushed up a few small fixes for boflink. Currently working on some other improvements which should make writing BOFs in higher level languages like C++/Rust/Zig a lot more feasible without needing to add various different compiler/source code tricks github.com/MEhrn00/bofl...

Release Boflink v0.6.1 · MEhrn00/boflink

0.6.1 - 2026-01-22 Fixed Panic at src/graph/output.rs:607 that would trigger if the size of the output .bss section was larger than the total size of the output file. (#38) CI built release binari...

github.com

Finally releasing a project publicly I have been pretty excited about. Here is Boflink, a linker for Beacon Object Files. github.com/MEhrn00/bofl... Supporting blog post about it. blog.cybershenanigans.space/posts/boflin...

GitHub - MEhrn00/boflink: Linker for Beacon Object Files

Linker for Beacon Object Files. Contribute to MEhrn00/boflink development by creating an account on GitHub.

github.com

Windows OpenSSH agent will store SSH keys under "HKCU:Software\OpenSSH\Agent\Keys". It's on my TODO list to write a tool that will extract these and decrypt them if needed

checky d luffy@checkymander.bsky.social · last yr.

Haven't seen much TTP sharing on bsky. So in order to help start to be the solution, for the next few days I'm going to share some of my favorite places to find secrets such as SSH Keys, Credential Objects, Access Tokens, and other stuff that usually gets forgotten about.

First: Visual Studio Code Visual Studio Code stores it's cached tabs at %APPDATA%\Code\Backups\<guid>\ The untitled temporary tabs will be found in the untitled folder, and each file contains the contents of those tabs

Not sexy things, but they make my day-to-day usage much better. I've seen many people bemoan about Ghidra 's interface. My experience with ANY tool is that things don't change unless the problem is reported to the devs. So reach out and lay out your concerns - they'll respond!

This is a pretty handy trick that I don't commonly see people doing. It's possible to embed a large file in a C/C++ program without needing to create a giant header file for it. Here's a slightly (...very) detailed blog post on it blog.cybershenanigans.space/posts/embedd...

🔥🔥🔥

Duane Michael@subat0mik.bsky.social · 2y ago

We just merged a massive PR from @bouj33boy.bsky.social into Misconfiguration Manager. It includes updated DETECTs 4-5, new DETECTs 6-9, and RECON-7. Check it out here: github.com/subat0mik/Mi...

Giving Advent of Code 2024 a go, first time using Rust so makes a nice challenge while learning something new D

It's that time of year again everybody! I want to know YOUR thoughts on Mythic! What did you like? What could be improved? What would you like to see next? Why do you or don't you use it? If you could change something, what would it be? www.surveymonkey.com/r/MythicPlan... I'm all ears :)

a woman wearing glasses says please with her hand up

ALT: a woman wearing glasses says please with her hand up

media.tenor.com

Look, I get it. We've normalized running ads in search results for companies to try to make more money. But I really don't need an ad for buying "linux kernel modules" on Amazon 🤦

you want a patchless amsi bypass?

Since this is turning into the the infosec social media platform, I've been working on trying to keep up with my security/technical related blog. I just released a new blog post: "Writing Beacon Object Files Without DFR" blog.cybershenanigans.space/posts/writin...