leon-schmidt.dev Blog

Beacon Object Files for Mythic - Part 3

Thu, 04 Dec 2025 09:00:00 +0200

This is the third post in a series of blog posts on how we implemented support for Beacon Object Files (BOFs) into our own command and control (C2) beacon using the Mythic framework. In this final post, we will provide insights into the development of our BOF loader as implemented in our Mythic beacon. We will demonstrate how we used the experimental Mythic Forge to circumvent the dependency on Aggressor Script – a challenge that other C2 frameworks were unable to resolve this easily.

Beacon Object Files for Mythic - Part 2

Thu, 27 Nov 2025 09:00:00 +0200

This is the second post in a series of blog posts on how we implemented support for Beacon Object Files (BOFs) into our own command and control (C2) beacon using the Mythic framework. In this second post, we will present some concrete BOF implementations to show how they are used in the wild and how powerful they can be.

Beacon Object Files for Mythic - Part 1

Wed, 19 Nov 2025 09:00:00 +0200

This is the first post in a series of blog posts on how we implemented support for Beacon Object Files into our own command and control (C2) beacon using the Mythic framework. In this first post, we will take a look at what Beacon Object Files are, how they work and why they are valuable to us.

Inside the NAC Pi: The journey of how we’ve built our own all-in-one device to bypass NAC (including 802.1X)

Fri, 05 Jul 2024 09:00:00 +0200

A blog entry from my work at cirosec GmbH about how I built our NAC Pi – a tool that can be used to break into any 802.1X-protected network.

With echo to root: Developing the rootkit 'Wurzelbausatz'

Fri, 21 Jun 2024 10:12:15 +0200

Origin of the Idea

Admittedly, I had never had any contact with rootkits and had never even thought about developing one. Until a few days ago, I wasn’t even clear on what a rootkit actually is and how it differs from a “normal” tool for privilege escalation. But that’s exactly why I decided to give it a try and find out.

The idea came from my computer science master’s program, specifically from a lab in the Embedded Linux module. Well, actually, that’s not quite right – the task was simply to develop a conventional driver to familiarize ourselves with Linux and the kernel’s build system. But that wasn’t particularly interesting without a real use-case, and who would I be if I didn’t choose something ridiculous for that – after all, I come from IT security and must shamelessly exploit the opportunity to work directly in the kernel’s memory area.

Raspberry Pi Zero W as a media_player for Home Assistant

Sun, 23 Jul 2023 15:39:02 +0200

The goal

I’ve been interested in home automation with Home Assistant for quite a while now, and my goal has always been to have a smart home that is truly “smart”. For me, that means as little interaction with the whole system as possible – certainly not in the sense that I have to pull out my phone to turn on a lamp.

On the other hand, I find “interaction in the other direction” – that is, from the smart home system to me – super important. I want feedback from my smart home system and have always wanted to get a classic Daily Briefing right after waking up – properly with weather forecast and the current episode of the german news podcast Tagesschau in 100 Sekunden! That’s what today is all about.