Weaponizing Starlark: Non-Executable Malware and Scriptable C2 Agents

Starlark in Go

Why?

Every C2 module system ends up in the same place. You either ship native code (a BOF, a DLL, raw shellcode) and accept that it looks like malware the moment it becomes executable, or you ship a script that needs powershell.exe or python.exe on the target, which …

View comments.

more ...

Making Linux Malware Suck Less: Stealthy Initial Access with emp3r0r Stager

banner

Linux malware sucks

The gap between Windows and Linux tradecraft is insulting.

On Windows, decades of relentless defensive pressure forced offensive engineers to actually innovate. Operators strip away PE bloat, deploy position-independent shellcode, spoof call stacks, and stomp legitimate modules just to get a foothold. Then you look at the …

View comments.

more ...