Projects
What I'm currently building.
Currently working on
C2 + Purple Team Lab
In progressAn isolated red-team lab built around the Sliver C2 framework. It runs an operator workstation, a headless C2 server, and a Windows target on a private VMware network, fully cut off from my real machines.
I built the environment from scratch and took Sliver end to end, compiling an implant, delivering it to the target, and driving a live session. I document what actually breaks, like Defender fighting back and fragile session-mode timeouts, not just the parts that work.
The next stage turns it purple. I map techniques to MITRE ATT&CK and build the detection engineering to catch the traffic I generate.
Latest writing
All posts →#3 Beacons, Persistence, and a Second Way In
Moving from a fragile live session to a beacon that survives reboots, with a Run key for persistence and OpenSSH as a second way onto the target.
#2 Deploying Sliver C2 and Landing a First Session
Installing Sliver on the C2 server, compiling an implant, and driving a live session on the Windows target.
#1 Building an Isolated C2 Lab in VMware Workstation
How I built a three VM lab, sealed off from my real network, to learn command and control from the ground up.