Red/Purple teamer and senior consultant @Mandiant Canada 🇨🇦
Canadaland
Joined September 2009
- Tweets598
- Following484
- Followers255
- Likes1.2K
will i am retweeted
@Wietze talking about hit awesome LNK research at @NorthSec_io
Live here > youtube.com/watch?v=-Q-_UwVD…
My talk from @hackfest_ca 2025 in Quebec City has been posted - “Beyond Red vs Blue: Elevating Your Security with Practical Purple Teaming”
Link: youtu.be/2eLh6swsoyQ
#hackfest #purpleteam
Started a collection of Rust code samples useful for malware development!
Gonna be ongoing additions to the repo as I learn more Rust dev.
Repo: github.com/wsummerhill/Rusty…
#rust #malwaredev #redteam
Excited to be presenting my talk on practical Purple Teaming at @hackfest_ca next Friday, October 17!
Gonna be fun returning to Hackfest in QC again after years.
cfp.hackfest.ca/hf2025/talk/…
#Hackfest #HF17
Thanks for the fun times and absolute schooling in the IDOT training this past week at Black Hat @SpecterOps @subat0mik @_xpn_ @hotnops @_Mayyhem
will i am retweeted
Two vulnerabilities impacting Aviatrix Controller 7.2.5012 and prior versions were discovered by Mandiant Red Team ‼️
Learn how they exploited Aviatrix Controller through authentication bypass, unsafe file upload, and argument injection: bit.ly/448JV0Z
will i am retweeted
It’s time to #ChooseCanada. 🇨🇦
Canada.ca/Choose-Canada
will i am retweeted
Today, the United States launched a trade war against Canada: their closest partner and ally — their closest friend.
Canadians are reasonable, but we will not back down from a fight.
Not when our country is at stake.
will i am retweeted
🚀 Today I'm launching ArgFuscator: an open-source platform documenting command-line obfuscation tricks AND letting you generate your own
🔥 68 executables supported out of the box - use right away, make tweaks, or create your own
👉 Now available at argfuscator.net
will i am retweeted
#LOLBAS project update:
Entries now have placeholders for paths, URLs, and more. This makes it easier to visually see what parts are "variable", and for LOLBAS API users (lolbas-project.github.io/api…) it'll be easier to use with automation.
Check it out:
⭐ lolbas-project.github.io/
will i am retweeted
Useful C2 techniques and cheatsheets learned from engagements :
Cobalt Strike Red Team Cheat Sheet : github.com/wsummerhill/C2_Re…
Sliver C2 Cheat Sheet : github.com/wsummerhill/C2_Re… credits @BSummerz
Finally published Part 2 of my small "Malware Development Introduction" series (aka malware dev 101).
This post covers intro to process injection, practical malware evasion concepts in C++/C#, and various resources I use.
wsummerhill.github.io/redtea…
DLL sideload of Microsoft Deployment Toolkit binary "Microsoft.BDD.Catalog35.exe" tested successfully using:
- IPHLPAPI.dll
- profapi.dll
- CRYPTBASE.dll
- cryptnet.dll
Default EXE install path: C:\Program Files\Microsoft Deployment Toolkit\Bin\
#hijacklibs #dllsideload #redteam
ALT DLL sideload of Microsof.BDD.Catalog35.exe
My slides from SecTor 2024 conference in Toronto are now published for my talk “Simplified Malware Evasion - Entropy and Other Techniques”.
i.blackhat.com/SecTor-2024/S…
#sector #sector2024 #malware #entropy
ALT Presenting about malware evasion at SecTor