Post by @kallisti@infosec.exchange

New blog post!

This time I talk about my new favorite evasive shellcode loader, Charon. I give a brief overview about what it does, how it works and which techniques it uses.

Also a brief addendum for enjoyers of bloated Implants such as Sliver.

https://ti-kallisti.com/general/ms/descending-into-hades.html

#InfoSec #Malware #Shellcode #RedTeam #RedTeaming #Pentesting #Charon #Sliver #Merlin #Mythic

Ti Kallisti

Descending into Hades

Traveling down the river Styx, undetected by AV and EDR.

#mythic #sliver #charon #redteaming #shellcode #redteam #merlin #malware #pentesting #infosec

Kallisti

@kallisti@infosec.exchange 3 weeks ago

New blog post!

I recently completed the OffSec Expert Penetration Tester (OSEP) certificate.

Here are my thoughts on it:

https://ti-kallisti.com/certs/osep.html

#InfoSec #RedTeam #RedTeaming #EDR #Offsec #Metasploit

Ti Kallisti

OffSec Experienced Penetration Tester (OSEP)

A review of the OffSec Experienced Penetration Tester (OSEP) certification and exam

Kallisti

@kallisti@infosec.exchange 2 weeks ago

New blog post!

The title should be self-explanatory, it's an appreciation post for Nightmare Eclipse.

You might notice that the tone is a bit more emotional/angry than my usual style of writing.
This one's personal.

https://ti-kallisti.com/general/ms/nightmare-eclipse.html

#NightmareEclipse #Microsoft #Hackers #InfoSec #SecurityResearch #ChainsawMan #Reze

Ti Kallisti

A Nightmare Eclipse Appreciation Post