Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.

---

You are here		0xcybery.github.io Bypass Windows Defender in Windows 11
|	|	cocomelonc.github.io Malware development trick 39: Run payload via EnumDesktopsA. Simple Nim example. - cocomelonc	1.2 parsecs away Travel
|	|
|	|	forensicitguy.github.io Inspecting a PowerShell Cobalt Strike Beacon | Tony Lambert	1.1 parsecs away Travel
|	|	In this post I want to take a look at a PowerShell-based Cobalt Strike beacon that appeared on MalwareBazaar. This particular beacon is representative of most PowerShell Cobalt Strike activity I see in the wild during my day job. The beacons often show up as service persistence during incidents or during other post-exploitation activity. If you want to follow along at home, the sample I'm using is here:
|	|	cocomelonc.github.io Malware AV/VM evasion - part 14: encrypt/decrypt payload via A5/1. Bypass Kaspersky AV. Simple C++ example. - cocomelonc	2.1 parsecs away Travel
|	|
|	|	blog.eclecticiq.com Sandworm APT Targets Ukrainian Users with Trojanized Microsoft KMS Activation Tools in Cyber Espionage Campaigns	19.3 parsecs away Travel
|		Sandworm APT targets Ukrainian users with Trojanized Microsoft KMS tools for cyber espionage, leveraging pirated software to exfiltrate sensitive data and compromise critical infrastructure.

home connect explore probe about/faq blog mcp contact updated: 2026-07-20