News RSS

Software -

Announcing the release of Tentacle C2

Announcing the release of Tentacle C2

🐙 Tentacle is here C2 without the overhead. Payloads without the pain. After two years of development, countless nights buried in MS/Linux/Apple APIs, and more test rigs than we care to admit — Tentacle is now officially live. It’s clean, fast, portable, and ridiculously easy to deploy. Built for operators who want precision and power without bloated infrastructure or unnecessary complexity. đŸ”„ Why Tentacle? Tentacle is a modern command-and-control platform that focuses on portability, usability, and power. It’s everything you need for red team ops, phishing engagements, and payload delivery — in a single executable. Whether you’re spinning it up locally...

Read more

injection, mitm, network, packet, Syphoon, Windows, WSUS -

The power of dynamic socket injection: WSUS command execution as [NT AUTHORITY/SYSTEM]

The power of dynamic socket injection: WSUS command execution as [NT AUTHORITY/SYSTEM]

Context Some time ago we published an important update to Syphoon, featuring the new dynamic socket injection system. In short, this allows using Ruby code to generate content on the fly for context-dependent injections. Taking things further To demonstrate the power of dynamic injections, we thought we'd publish a new release of Syphoon, this time including some new scripts. Specifically, two new scripts are provided to attack the Windows Update system (WSUS) when configured to use HTTP. wsus-inject-cmd This first script simply allows running commands (through cmd.exe) as 'NT AUTHORITY/SYSTEM' on any client machine requesting WSUS through HTTP. This is...

Read more

ethernet, injection, lan, mitm, network, packet, sniff, wifi -

Pwn harder with dynamic injection in Syphoon 1.4.0

Pwn harder with dynamic injection in Syphoon 1.4.0

The best socket injection system just got better Socket injection is big fun for sure. Easily drop XSS-based attacks on victim browsers with a simple regex, inject payloads within SMTP/POP emails, or simply embed raccoon pictures in every web page. However, static strings can only take us so far. There comes a point when we start thinking it would be nice for the string to be a bit more flexible, maybe even dependent on specific conditions for each injection. This is taking us into the realm of dynamic injection. Introducing dynamic injection Instead of simply asking Syphoon to insert some...

Read more

azban, delivery, injection, payload, usb -

A new USB injection tool

A new USB injection tool

USB injection is such a pleasure: find an open session, plug in, loot. Operational constraints can make it difficult though: not knowing the keyboard layout of the victim for example. Whenever flexibility is key, our signature injector Azban is able to deploy payloads on virtually any OS and keyboard layout combination. However to achieve this Azban requires the victim workstation to be connected to the Internet. While this is not an issue in many cases, there are situations where an offline injection is actually required, such as tightly-restricted corporate network environments. Thus, a new solution presents itself in the form...

Read more

merch -

Stickers!

Stickers!

Show off some Ringtail We have combined our best logos and illustrations onto a single sticker sheet. Cover your laptop, phone, shoes, pet rock or whatever in these beautiful, detailed and highly resistant stickers. The actual size of the sheet itself is 152 mm x 102 mm. Get your stickers today!

Read more

Tags