Glimmer
Purple Team Engineering: Covert Channels and the DNF Numbers Station
2026-04-13
·
Keith Linneman
Building a C2 channel indistinguishable from package manager traffic, encoding tasking in Apache ETag microseconds, and surveying the surprising state of repository security on Fedora.
Purple Team Engineering: Building and Detecting a Rust C2 Beacon
2026-04-09
·
Keith Linneman
Building an offensive tool and the detection rules to catch it. The architecture behind Glimmer's dual-layer encryption, binary hardening from 1.4MB to 388K, and real-time YARA detection through Wazuh.