BallisKit @BallisKit

BallisKit provides tooling and services to professional Pentesters & Red Teams. We develop MacroPack, ShellcodePack, and DarwinOps. #redteam #infosec balliskit.com France Joined June 2020

Tweets

379
Followers

3K
Following

33
Likes

524

Emeric Nasi @EmericNasi

3 days ago

I will be at the "LeHack" conference in Paris with the @BallisKit team end of the week! Ping me if you want to have a chat!

0 2 2 442 0

View Details

Running Sliver from a Word Macro on macOS? Yes it's very easy with the future DarwinOps release! C & Obj-C support , Native ARM64 , JIT-only, Obj-C compatibility, implies full Mythic Poseidon loadability. Word/Excel-embedded JXA execution, no osascript binary involved. #redteam #macos

1 17 55 4K 27

View Details

BallisKit @BallisKit

2 weeks ago

Introducing EDR Eclipse, our new premium extension for ShellcodePack! EDR Eclipse is an advanced kernel-assisted telemetry suppression module designed to blind the EDR without terminating it. Key capabilities: • Kernel callback removal • Dynamic offset resolution • Telemetry suppression • ETW-TI suppression • Minifilter neutralization Due to the sensitive nature of the technology, availability will be limited to eligible customers. More technical details, demonstrations, and videos are available on the BallisKit Discord! #RedTeam

2 19 107 6K 49

View Details

BallisKit @BallisKit

2 months ago

New DarwinOps release! We mainly added more EDR Evasion profiles and improved JXA escape with the ability to generate a Macho/Dylib that does not use Osascript (or OSAKit) . This prevents detection of any Osascript EST events! #redteam

1 10 39 5K 30

View Details

BallisKit @BallisKit

a month ago

We updated our Sliver C2 + BallisKit tutorial to adapt to the latest Sliver version. Learn how to use ShellcodePack/MacroPack to harden Sliver implants and turn them into initial access payloads! More C2 tutorials available on the blog (Adaptix, Mythic) blog.balliskit.com/tutorial-slive…

0 17 36 3K 16

View Details

BallisKit @BallisKit

2 months ago

LNK is still a top-tier initial access vector. Most defenses still underestimate it. Soon to be released MacroPack 2.8.9 pushes LNK tradecraft further: • Advanced customization & evasion workarounds • Improved EDR bypass • Several delivery alternatives Version also contains other features such as VHDX container, new .NET shellcode injection, etc. Built from real-world testing against modern EDRs. #RedTeam

0 11 95 5K 52

View Details

Emeric Nasi @EmericNasi

3 months ago

I just wrote a tutorial explaining how to combine Adaptix C2 with MacroPack and ShellcodePack! This provides multiple initial access and EDR evasion options to Adaptix C2 users. Tutorial includes: LNK, CLickOnce, DLL Sideloading, Exe, HTA, etc! #redteam blog.balliskit.com/tutorial-adapt…

2 46 201 15K 150

View Details

BallisKit @BallisKit

3 months ago

Following the new DLL Sideloading/Proxying capacities in ShellcodePack, we' updated the tutorial on our Blog! #redteam blog.balliskit.com/tutorial-dll-s…

0 11 62 3K 40

View Details

BallisKit @BallisKit

3 months ago

@du3kkk0 The contact email must come from a company domain and the email must mention your name & company. We do not accept emails likg gmail/outlook etc. Only official company/organization email addresses.

0 0 0 6 0

View Details

BallisKit @BallisKit

3 months ago

BallisKit ShellcodePack 2.8.1 is out! Focus: AppDomain injection & DLL sideloading, plus updated EDR evasion profiles! Learn how to backdoor .NET apps with our appdomain injection tutorial: blog.balliskit.com/appdomain-inje… #redteam

1 9 31 3K 16

View Details

BallisKit @BallisKit

3 months ago

@du3kkk0 Hello, you can reach out by email using contact [ at ] balliskit.com, using a professional non anonymous email.

1 0 0 26 0

View Details

BallisKit @BallisKit

3 months ago

The next ShellcodePack version supports AppDomain injection payloads! We also simplified and improved DLL sideloading/proxying and updated the EDR bypass profiles. Sideload anything with a few clicks! 😎 #redteam

0 11 56 3K 24

View Details

BallisKit @BallisKit

4 months ago

Using #darwinOps, after setting up your redteam scenario, you can choose which phishing template will be most convincing for your engagement 😎 Contact us to know more about redteaming on macOS and ready to use phishing templates! #redteam

0 5 15 2K 5

View Details

BallisKit @BallisKit

5 months ago

MacroPack new version is out! 🥳 With improved EDR evasion profiles and all kind of ready to use initial access formats and scenario! Also now everything can be leveraged with the new BallisKit GUI! 😎 #redteam