https://blog.0xf4de.com/blog Offensive security, C2 infrastructure, shellcode, and lab builds from 0xf4de. en-us (Chad Wilson) (Chad Wilson) Fri, 06 Mar 2026 00:00:00 GMT https://blog.0xf4de.com/blog/writing-a-stager https://blog.0xf4de.com/blog/writing-a-stager We build a shellcode stager in C that fetches Apollo over the network in chunks, loads it with NT-layer calls, and executes it. Along the way we get into SSNs, indirect syscalls, what your call stack looks like to a defender, and why your stager and C2 redirectors should never be the same box. Fri, 06 Mar 2026 00:00:00 GMT (Chad Wilson) c2mythicstagersshellcodeindirect-syscallsred-teamoffensiveedr https://blog.0xf4de.com/blog/south-park-ludus-range https://blog.0xf4de.com/blog/south-park-ludus-range Stand up the South Park range on Ludus. AD environment, a Debian redirector, and a Kali C2 box wired together the way a real engagement looks. Wed, 12 Nov 2025 00:00:00 GMT (Chad Wilson) ludushomelabred-teamactive-directorymythicc2redirectoroffensive https://blog.0xf4de.com/blog/stagers-agents-and-the-chain-between-them https://blog.0xf4de.com/blog/stagers-agents-and-the-chain-between-them An intro to modern C2 infrastructure. We cover the moving parts of a post-exploitation chain, how stagers and agents fit together, and why the Metasploit model is not what modern red teams reach for. Mon, 27 Oct 2025 00:00:00 GMT (Chad Wilson) c2mythicimplantsstagersred-teamoffensive