@rustyphasm

rustyphasm has been a member of Linktree for 1 year and joined in July 2025. The social media accounts linked to from rustyphasm are: • X • Bluesky • GitHub Besides social media accounts, rustyphasm has populated their site with: • GitHub - synacktiv/DCOMIllusionist: DCOM in memory and fileless lateral movement techniques through .Net deserilization • x33fcon - DDD: DCOM, DotNet, Deserialization • x33fcon Advanced - Active Directory Red Teaming • Caught in the Octopus Trap: Unauthenticated RCE in Argo CD with CodeQL • Hexacon24 - Advanced Active Directory and Azure exploitation • Typo3: leak to Remote code execution. • Relaying Kerberos over SMB using krbrelayx • Finding gadgets like it's 2015: part 2 • CVE-2024-26183 • SSTIC24 - Action Man VS Octocat: GitHub action exploitation • Finding gadgets like it's 2015: part 1 • GitHub Actions exploitation: introduction • Hijacking GitHub runners to compromise the organization • THC23 - Automating the extraction of secrets stored inside CI/CD systems • Finding gadgets like it's 2022 • GitHub Actions exploitation: untrusted input • PTS22 - Finding Java deserialization gadgets with CodeQL • Injecting Java in-memory payloads for post-exploitation • GitHub Actions exploitation: repo jacking and environment manipulation • GitHub Actions exploitation: self hosted runners • GitHub Actions exploitation: Dependabot • CI/CD secrets extraction, tips and tricks