The Game Has Changed: Rapid PIC Development with Crystal Palace and Cobalt Strike by Will Burgess [Beware, marketing wall will ask for email few mins in] www.cobaltstrike.com/the-black-ha... Demos a Universal Loader which modularizes loader problem set & allows mix/match of tradecraft in it. 🙌

I'm a little late on this. Primo (x.com/cr4ckeddd) is continuing work on TinyC2. Added built-in Lua scripting to it: x.com/cr4ckeddd/st... Project is at: github.com/0xPrimo/Tiny... Seems a bunch of other post-ex added too.

My observation is it's tightly bound (sometimes, that's the goal) to a loader with one hook only. mov ecx, eax is ror13hash's return value (eax) getting placed into the first arg register ecx. The middle is code generated by the attached. xor rax, rax is the prologue of the generated code.

The PIC Parterre blog post touched on some of this. Next CPL release, I plan to de-emphasize PIC (in the same way I de-emphasized DLL loaders)--because I hope next features make the code/conventions => multiple modality thing clearer... and modality is a tradecraft choice... separate of capability.

VIA: x.com/NationalCCDC... Congratulations to Dakota State University--the 2026 National Collegiate Cyber Defense Competition champions. A huge congrats to University of Virginia on 2nd and Western Washington University on 3rd.

Comment out line 54 of src/crystalpalace/export/ParseImport.java. That'll take care of the error. Just did a quick hacky POC and it worked with my unit test BOF runner. I'll work a more permanent fix to that in the next release. (I used LIbTCG only for dprintf). I think this is an interesting use.

Discovering Tradecraft Garden by x.com/jjavierolmedo hackpuntes.com/posts/explor... A gentle introduction to the project and specifically using the ./link command & running examples. I'm glad the guardrails example (now follow-on loader agnostic) was called out. It's a waiting gem in the corpus.