Field notes from
our operators
Tradecraft, tooling, and lessons we are willing to share. Written by the people who build and run our gear.
Windows Internals·July 18, 2026·14 min read
GDID: The Windows Global Device Identifier
Where the Windows Global Device Identifier lives, how Microsoft issues it, how it is used to track installs across services, and how far you can actually patch it.
Smukx
@5mukx
Rust·February 24, 2026·6 min read
Make Your Rust Implant More OPSEC
Stripping symbols, remapping paths, recompiling std with build-std, encrypting strings, and bypassing IsDebuggerPresent without ever touching the IAT.
Smukx
@5mukx
DLL Sideloading·February 17, 2026·9 min read
DLL Sideloading and Proxying in Red Team Operations
Why we lean on third party signed binaries, how to hunt sideloadable DLLs with ProcMon and x64dbg, and how to build a Rust proxy DLL that runs your implant while the host app keeps working.
Smukx
@5mukx