Reposted by WulStack.bsky.socialRastaMouse @rastamouse.me · 06/06/2026More fun with Crystal Palace unwind data. 041
Reposted by WulStack.bsky.socialRastaMouse @rastamouse.me · 04/06/2026I had the occasion to play with EAF the other day, so I added a bypass to the TCG's PIC services module. It provides a way to resolve Win32 APIs through gadget in NTDLL's .text section. 072
Reposted by WulStack.bsky.socialRaphael Mudge @raphaelmudge.bsky.social · 01/06/2026Relax and unwind in the Tradecraft Garden aff-wg.org/2026/06/01/r... Celebrating one year of Tradecraft Garden. 40 blog posts. ~30 POCs/projects. A lot of thank you's inside. The release itself: stack unwinding data generation, reference relaxation in the linker, and COFF mixing (+disco baby!)aff-wg.orgRelax and unwind in the Tradecraft GardenWe’re at the 12th release of Crystal Palace and marking one year in the Tradecraft Garden. This release adds reference relaxation to make global references PIC-friendly. I’ve also added stack unwin… 2148
WulStack.bsky.social @d1to.bsky.social · 27/05/2026@rastamouse.me Hello, I have tested your Yara rule on .bin generated by my loader and following your method in this article : rastamouse.me/cracking-the... I have written the following yara rule. I am not an expert of reverse and in YARA rules but it is working ... What do you think about it ? 200
Reposted by WulStack.bsky.socialRastaMouse @rastamouse.me · 26/05/2026Silly little post experimenting with module stomping PIC. rastamouse.me/module-stomp... 133
WulStack.bsky.social @d1to.bsky.social · 25/05/2026As part of my thesis, I developed a Proof of Concept for a UDRL using Gargoyle and inspired by Crystal Palace, developed by @raphaelmudge.bsky.social . github.com/WulStack/gar... I will design a complete UDRL based on this first project in the next month. 022
Reposted by WulStack.bsky.socialRaphael Mudge @raphaelmudge.bsky.social · 24/05/2026Just came across this Sleep-hooking UDRL demonstration of Gargoyle using Crystal Palace by WulStack: github.com/WulStack/gar... The above led me to "Gargoyle, a decade later" posted by Josh Lospinoso -- Very philosophical. Worth a read. lospino.so/blog/gargoyl...lospino.soGargoyle, a decade later | Josh LospinosoA reflective retrospective on Gargoyle, temporal memory state, the 2026 refresh, and what better validation teaches defenders. 064
