Cody Thomas (@its_a_feature_) 's Twitter Profile
Cody Thomas

@its_a_feature_

Mythic Developer (github.com/its-a-feature/…) | @SpecterOps @[email protected] | @its-a-feature.bsky.social

ID: 752540413517402112

calendar_today11-07-2016 16:29:50

872 Tweet

7,7K Followers

305 Following

Cody Thomas (@its_a_feature_) 's Twitter Profile Photo

#MythicTip Not a fan of Mythic's top navigation bar? Go to your settings and click the 🚀 icon to enable the experimental vertical bar. You can expand as needed and even change the order/visibility of the shortcuts on the side! It's a much cleaner and smaller interface :)

#MythicTip Not a fan of Mythic's top navigation bar? Go to your settings and click the 🚀 icon to enable the experimental vertical bar. You can expand as needed and even change the order/visibility of the shortcuts on the side! It's a much cleaner and smaller interface :)
Cody Thomas (@its_a_feature_) 's Twitter Profile Photo

Many in the Mythic Community have asked for a way to standardize BOF/.NET execution within Mythic Agents. Today I'm releasing Forge, a new Mythic container to do just that: posts.specterops.io/forging-a-bett… We're starting off with default support for Apollo and Athena. Check it out! :)

Cody Thomas (@its_a_feature_) 's Twitter Profile Photo

#MythicTip Not a fan of Mythic's UI colors? Change them! Click the cog for your user settings and change all the colors for light and dark separately for what you prefer! You can export/import these with the buttons at the top too for easy reuse. Background images also work 🫣

#MythicTip Not a fan of Mythic's UI colors? Change them! Click the cog for your user settings and change all the colors for light and dark separately for what you prefer! You can export/import these with the buttons at the top too for easy reuse. Background images also work 🫣
Cody Thomas (@its_a_feature_) 's Twitter Profile Photo

#MythicTip Want to start automating stuff with Mythic, but not sure where to start? Check out the built-in Jupyter notebooks with Mythic Scripting installed and have fun! Lots of ready to run examples exist already :) Just log in with the Jupyter token from your .env file

#MythicTip Want to start automating stuff with Mythic, but not sure where to start? Check out the built-in Jupyter notebooks with Mythic Scripting installed and have fun! Lots of ready to run examples exist already :) Just log in with the Jupyter token from your .env file
Cody Thomas (@its_a_feature_) 's Twitter Profile Photo

The Mythic family continues to grow! Another cool Windows agent written in C that already has COFF execution! Be sure to check it out and their blog series on it c0rnbread.com/creating-mythi…

Adam Chester 🏴‍☠️ (@_xpn_) 's Twitter Profile Photo

On PTO and bored, so playing around with MCP by exposing Mythic APIs to Claude and seeing what the result. Attempting to have it emulate threat actors while operating Apollo in a lab... would make a good sparring partner :D youtube.com/watch?v=ZooTlw…

Patrick Wardle (@patrickwardle) 's Twitter Profile Photo

Apple will (finally!) bring TCC events to Endpoint Security in macOS 15.4 🥳 I've just posted "TCCing is Believing" which covers details, nuances, and PoC code for the new 'ES_EVENT_TYPE_NOTIFY_TCC_MODIFY' event objective-see.org/blog/blog_0x7F…

SpecterOps (@specterops) 's Twitter Profile Photo

Think NTLM relay is a solved problem? Think again. Relay attacks are more complicated than many people realize. Check out this deep dive from Elad Shamir on NTLM relay attacks & the new edges we recently added to BloodHound. ghst.ly/4lv3E31

Cody Thomas (@its_a_feature_) 's Twitter Profile Photo

This has been a LONG time coming! This is just the beginning though :) I'll be recording more for updates, features, workflow updates, and yes - a developer series too! Be sure to let me know what you do/don't like about this format and what kinds of things you'd like to see!

Alfie Champion (@ajpc500) 's Twitter Profile Photo

Using Mythic and VECTR on your purple teams? 💜 I’ve just open-sourced a new Mythic service container that allows you to auto-populate VECTR test cases based on your Mythic taskings. github.com/MythicAgents/V…

SpecterOps (@specterops) 's Twitter Profile Photo

Getting started w/ Mythic? We've got you covered. Cody Thomas walks through the web UI basics, login process, & how to configure your default username/password. Check it out! ▶️ ghst.ly/user-interface Watch the full series: ghst.ly/mythic-op

Adam Chester 🏴‍☠️ (@_xpn_) 's Twitter Profile Photo

Worked on a simple POC last night for connecting Mythic up to LiteLLM (pointing to Claude) for riding shotgun on a C2 session. Only using shell cmd, but provides oversight and hints to potential paths to explore. Quite happy for a weekend project :D youtu.be/C9J5okm6cA4

__oblivion (@awwhwhasz) 's Twitter Profile Photo

Hello everyone, I want to bring you some news, I'm developing an agent for Mythic thinking about real environments in terms of features, evasion, etc. The project is currently in alpha, but I want to preview some (but not all) of its capabilities Some rnd prints... +++

Hello everyone, I want to bring you some news, I'm developing an agent  for Mythic thinking about real environments in terms of features,  evasion, etc.    

The project is currently in alpha, but I want to preview some (but not  all) of its capabilities

Some rnd prints...
+++
Cody Thomas (@its_a_feature_) 's Twitter Profile Photo

Are you thinking of writing a C2? Do you want to modify an existing C2? Have you ever thought "why on earth did they do it that way"? Join me as I show what I've learned from 7 years of open source C2 and agent development so you can start off with success :) I can't wait!

Luke Roberts (@rookuu_) 's Twitter Profile Photo

This is going to be a lot of fun! 🍎 I'll be talking about macOS tradecraft and internal red teaming more generally. Attendance is completely free and gives access to the talks and trainings. If you're a student or are starting your career in security, check it out! 🤙

BallisKit (@balliskit) 's Twitter Profile Photo

New tuto! Weaponize Mythic Apollo using MacroPack and ShellcodePack. Tested on EDRs of course. blog.balliskit.com/tutorial-mythi… #redteam

Will Schroeder (@harmj0y) 's Twitter Profile Photo

Thank you so much to /ˈziːf-kɒn/ and its organizers for an awesome experience! Lee Chagolla-Christensen and I had a blast talking about the new Nemesis 2.0 rewrite (code live at github.com/SpecterOps/Nem… !) and hope to be back next year #x33fcon

Lee Chagolla-Christensen (@tifkin_) 's Twitter Profile Photo

Melvin langvik Will Schroeder Thanks for diving into it and sharing! Really appreciate it! We'll definitely be addressing many of the things you highlighted. Definitely open to more feedback for you (or anyone else) about the workflow as you use it more!

Matt Creel (@tw1sm) 's Twitter Profile Photo

Couple of new and not-so-new commits to bofhound added support for additional parsers - Mythic logs (connecting to a live Mythic server) - OutflankC2 logs - Havoc logs And support to directly upload output to BHCE for you github.com/coffeegist/bof…