rajkit @rajkit.bsky.social · 29/09/2026www.youtube.com/watch?v=sLXr...youtube.comInside BOFs, CPLs, and PICs (1/3): How the Loader Prepares and Executes a COFF Object in MemoryYouTube video by JellyBee 000
Reposted by rajkitFallenAngel666 @fallenangelc2.bsky.social · 27/09/2026I integrated LoudSunRun-style stack spoofing into Bahamut so direct API calls and indirect syscalls, which still execute from inside ntdll present a legitimate caller chain. 221
rajkit @rajkit.bsky.social · 27/09/2026youtu.be/Rhm-Q7iBFNM?...youtu.beSwarm Factory, The JellyBee System PIC Crafting Visual EnviromentYouTube video by JellyBee 000
Reposted by rajkitrajkit @rajkit.bsky.social · 23/09/2026Next time, we will discuss the "PILL Paradigm" blog, but first, it is necessary to show how the system works in order to understand its viability. www.youtube.com/watch?v=_1ck...youtube.comJellyBee: The Swarm FactoryYouTube video by JellyBee System 001
rajkit @rajkit.bsky.social · 23/09/2026Next time, we will discuss the "PILL Paradigm" blog, but first, it is necessary to show how the system works in order to understand its viability. www.youtube.com/watch?v=_1ck...youtube.comJellyBee: The Swarm FactoryYouTube video by JellyBee System 001
Reposted by rajkitRaphael Mudge @raphaelmudge.bsky.social · 21/09/2026It's a Mod, Mod, Mod, Mod World aff-wg.org/2026/09/21/i... TCG update: - .spec files are now modules w/ query-able meta-info - Added hexdump and dump to see intermediate outputs - Added encode&mask for content transforms And, a modular demo for encode/mask: tradecraftgarden.org/simpletransf...aff-wg.orgIt’s a Mod, Mod, Mod, Mod Worldn options. 053
rajkit @rajkit.bsky.social · 15/09/2026A serie of videos where going to increase the complexity of the compiled proyect from the simplest to hardest with JBKORE. @raphaelmudge.bsky.social www.youtube.com/watch?v=ibTm...youtube.comJBKORE ::: Example one ::: Simple http-to-stdoutYouTube video by JellyBee System 022
rajkit @rajkit.bsky.social · 09/09/2026kdrajkit.github.io/blogs/jellyb... @raphaelmudge.bsky.socialkdrajkit.github.ioBOF, Crystal Palace and the JellyBeeKORE compilerBOF, Crystal Palace and JBKORE within a modular architecture for compilation, loading and in-memory execution. 100
rajkit @rajkit.bsky.social · 01/09/2026🐝 🪼 Analyzing the Pe-Sieve scan of the implant, I am working on every detail. I am also getting good results from the SIEM in an environment with ElasticEDR. Long live for the position independent shellcode modules system!!! 000
rajkit @rajkit.bsky.social · 27/08/2026🥷🏿 🧪 Been a while since I came across a reversing find this hard. Thanks for share reversing job!! research.checkpoint.com/2026/btr-ref...research.checkpoint.comBTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive - Check Point ResearchResearch by: Jiří Vinopal (@vinopaljiri) Abstract What if a trusted security component could be repurposed into an attacker-controlled kernel primitive? What if a signed Microsoft remediation driver c... 000
rajkit @rajkit.bsky.social · 24/08/2026www.linkedin.com/posts/ramon-...linkedin.com#pic #resetnightmare #edr #telemetry #microsoft #lsass #windows #kernel #debugging #lsass #pic #edr | Ramon Gonzalez Gaztelupe🐝 🪼 I used my JBKORE compiler to generate a pure #PIC version of #ResetNightmare and test its execution in an environment protected by Elastic #EDR. The goal is to analyze the #telemetry generated ... 000
rajkit @rajkit.bsky.social · 24/08/2026x.com/NtRajkit/sta...x.comnt!RajKit (@NtRajkit) on Xhttps://t.co/LW3sJjhL58 010
rajkit @rajkit.bsky.social · 21/08/2026www.linkedin.com/posts/ramon-...linkedin.com🐝 🪼 💊 Let’s dance across the whole Jellybee research system for advanced Red Team operations, powered by what may be the first truly position-independent artifact… | Ramon Gonzalez Gaztelupe🐝 🪼 💊 Let’s dance across the whole Jellybee research system for advanced Red Team operations, powered by what may be the first truly position-independent artifact compiler. https://lnkd.in/eZ4yKs5Q 000
rajkit @rajkit.bsky.social · 19/08/2026github.com/kdRajKit/Res...github.comGitHub - kdRajKit/ResetNightmare-C-code-POCContribute to kdRajKit/ResetNightmare-C-code-POC development by creating an account on GitHub. 010
Reposted by rajkit5pider @5pider.net · 06/07/2026I released another video demonstration about the stack spoofing capabilities and especially CET compliance and being able to migrate into an CET enabled process such as Microsoft Edge and retrieving the passwords and cookies database via the cookie-monster BOF www.youtube.com/watch?v=hQqI...youtube.comHavoc Professional 0.7 - CET Compliant Stack Spoofing and Browser Cookie DumpingYouTube video by 5pider 272
Reposted by rajkitRaphael Mudge @raphaelmudge.bsky.social · 16/07/2026LSH delish aff-wg.org/2026/07/16/l... Another CPL and TCG update: Specify language-specific exception handlers in +unwind, user-defined intrinsics, and callnear to make before/after more useful.aff-wg.orgLSH delishAnother Crystal Palace and Tradecraft Garden release is now available. This release fills some gaps from recent releases and rounds out the feature set (aka, stuff I wanted to ship, but didn’… 155
rajkit @rajkit.bsky.social · 06/08/2026kdrajkit.github.io/blogs/jellyb...kdrajkit.github.ioRewiring the GCC Compilation Lifecycle for Position-Independent ModularityJellyBee System Internals · Compiler · Part One: GCC, JBIR, Matrix, the x64 ABI, and COFF verification for PIC modularity. 030
