BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: M0us3: A Lightweight\, Multi Session C2 Framework wi
 th a Rust\n   based Windows Implant\n   Tags: Red Team Village | Misc\n   
 When: Sunday\, Aug 9\, 13:00 - 13:59 PDT\n   Where: LVCCW Level 1 Hall 1 3
 09 (Red Team Village) Workshop Stage 1 -\n   [1]Map\n\n   Description:\n\n
    "M0us3: When the Mouse Eats the Cat – A Rust Powered Windows Implant\
 n   and Its Interactive Python C2" The C2 landscape is dominated by heavy\
 n   hitters written in Go\, C#\, or Nim. But what if the implant was built
 \n   with Rust – a language revered for memory safety\, tiny binaries\, 
 and\n   growing evasion potential – and the server was a snappy\, persis
 tent\n   Python TUI that remembers everything about your sessions? Enter M
 0us3.\n   Not another fork of a known framework. A ground up\, cross langu
 age C2\n   system where the Windows agent is pure Rust\, and the operator\
 n   interface is an interactive Python3 server with built in session\n   p
 ersistence\, command history\, real time state tracking – and now\,\n   
 the ability to spin up multiple listeners on the fly. Why Rust for the\n  
  Implant? Rust gives us crash resilient concurrency\, no GC pauses\, and\n
    a binary size under 2MB (stripped). It compiles to clean Win32 API\n   
 calls without the .NET or Go runtime baggage\, making it naturally\n   har
 der to signature. The result? At the time of submission\, M0us3's\n   impl
 ant is FUD across Sophos\, Kaspersky\, Microsoft Defender\, ESET\, and\n  
  Bitdefender – no static detections\, no behavioural flags. This isn't\n
    luck\; it's the combination of raw Win32 calls\, custom AES GCM\n   enc
 ryption\, and the absence of any borrowed IoC patterns. M0us3's\n   agent 
 delivers a full shell\, file upload/download\, and client side\n   sleep w
 ith jitter – all over HTTP wrapped in AES GCM. The encryption\n   is not
  an afterthought\; GCM's authenticated mode avoids padding\n   oracles and
  provides integrity out of the box. The Python Server –\n   More Than a 
 Listener Most lightweight C2 servers are stateless or log\n   only. M0us3'
 s controller is interactive and stateful. Disconnect?\n   Reconnect – yo
 ur session is exactly where you left it. This\n   persistence\, combined w
 ith a clean terminal UI\, allows red teamers to\n   manage dozens of impla
 nts without losing context\, and blue teamers to\n   analyse complete oper
 ator implant interaction logs. Recent\n   enhancements give operators the 
 flexibility to manage multiple\n   listeners simultaneously from the same 
 interface – whether\n   segmenting targets by campaign\, geography\, or 
 testing different\n   evasion techniques – all without spinning up separ
 ate server\n   instances. What's Next? HTTPS support is already in the pip
 eline –\n   the encryption layer is designed to be protocol agnostic\, s
 o switching\n   to TLS is a matter of swapping the transport wrapper. Mult
 i-listener\n   management was just the beginning.\n\n   SpeakerBio:  Aryan
  Jogia\n\n   Aryan is a senior security researcher specializing in the int
 ricate\n   dance of offensive evasion and defensive bypass. With nearly si
 x years\n   of focused experience\, including a tenure with the Government
  of\n   India\, he dissects modern AV and EDR systems by targeting their c
 ore\n   architectural assumptions on Windows and nix platforms. His deep w
 ork\n   in malware development and low-level programming fuels the creatio
 n of\n   advanced tooling for red team engagements\, where he has successf
 ully\n   navigated fortified environments. An avid contributor to the\n   
 community\, Aryan has shared his findings at venues including WildWest\n  
  Hackin' Fest\, The Hack Summit\, and CarolinaCon\, and has led technical\
 n   training sessions at BSides events. His research extends to pioneering
 \n   fuzzing implementations and automation\, constantly pushing the\n   b
 oundaries of what's possible in security research.\n\n   '\n\n   1. #LVCCW
 _Level1_Hall1\n\n\n
DTEND:20260809T205900Z
DTSTART:20260809T200000Z
LOCATION:Red Team Village - LVCCW Level 1 Hall 1 309 (Red Team Village) Wor
 kshop Stage 1
SUMMARY:M0us3: A Lightweight\, Multi Session C2 Framework with a Rust based
  Windows Implant
END:VEVENT
END:VCALENDAR
