Sign in

FallenAngel666

@fallenangelc2.bsky.social
14 followers 22 following 26 posts

CRTL/CRTO/CRTP Researcher and enthusiast of EDR and Windows evasion fallenangel666-blog.pages.dev "Truly strong people are always gentle."

PostsRepliesMedia
FallenAngel666 @fallenangelc2.bsky.social · 27/09/2026
I integrated LoudSunRun-style stack spoofing into Bahamut so direct API calls and indirect syscalls, which still execute from inside ntdll present a legitimate caller chain.
221
FallenAngel666 @fallenangelc2.bsky.social · 19/09/2026
Zilean is working properly in Bahamut !!!! It’s been a good experiment with Sleepmask as a replacement for Ekko. What’s more, there’s no documentation on Zilean (I think my AI assistant has got the blues and my hands are aching). #redteam #UDRL #mythicc2 #cybersecurity #C2 #windows #EDR
020
Reposted by FallenAngel666
rajkit @rajkit.bsky.social · 15/09/2026
A serie of videos where going to increase the complexity of the compiled proyect from the simplest to hardest with JBKORE. @raphaelmudge.bsky.social www.youtube.com/watch?v=ibTm...
youtube.com
JBKORE ::: Example one ::: Simple http-to-stdout
YouTube video by JellyBee System
022
Reposted by FallenAngel666
RastaMouse @rastamouse.me · 11/09/2026
Hopefully the talk is better than my mug shot… no promises though.
233
FallenAngel666 @fallenangelc2.bsky.social · 11/09/2026
Right then. I’ve finally got round to it. I’ve decided to start a rather ambitious project: to finish creating Bahamut. Bahamut is my personal custom agent for MythicC2, which focuses mainly on evading EDR/AV technologies.
170
Reposted by FallenAngel666
RastaMouse @rastamouse.me · 19/08/2026
@raphaelmudge.bsky.social github.com/sliverarmory...
github.com
GitHub - sliverarmory/crystal-grotto: Golang Port of Crystal Palace
Golang Port of Crystal Palace. Contribute to sliverarmory/crystal-grotto development by creating an account on GitHub.
153
FallenAngel666 @fallenangelc2.bsky.social · 07/08/2026
My latest research/documentation has now been published. This is the weakest of the three because it only explains how I develop my loaders for my Mythic and Crystal Palace shellcodes. (As I always mention, this is in Spanish.) fallenangel666-blog.pages.dev/posts/loader... #RedTeam #EDR #C2 #C++
fallenangel666-blog.pages.dev
Un cargador Stage-0 en Rust para Crystal Palace PICOs | Fuck the critics
Estaba harto de escribir VirtualAlloc → WriteProcessMemory → CreateRemoteThread en cada stage y de ver cómo las mismas reglas YARA lo detectaban cada vez. Así q
240
Reposted by FallenAngel666
RastaMouse @rastamouse.me · 28/07/2026
I wrote a little bit about COFF Mixing rastamouse.me/coff-mixing/
284
FallenAngel666 @fallenangelc2.bsky.social · 25/07/2026
Hi, bluesky. I just created my account. And I wanted to share two of my most recent posts here about Crystal Palace and Mythic. fallenangel666-blog.pages.dev/posts/crysta... fallenangel666-blog.pages.dev/posts/mythic...
fallenangel666-blog.pages.dev
crystal-palace. tradecraft link PIC y evasion de EDRs | Fuck the critics
Esto no es un tutorial. Ya existen muchos. Esto es una inmersión arquitectónica profunda en Crystal Palace, el linker PIC y el lenguaje de script de enlazado cr
162