Russel Van Tuyl

Merlin

Sun, 01 Oct 2017 00:00:00 +0000

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Go. It leverages HTTP/2 for C2 communications, providing a modern and extensible framework for red team operations.

go-shellcode

Mon, 01 Jun 2020 00:00:00 +0000

A repository of Windows shellcode runners and supporting utilities. The applications load and execute shellcode using various API calls and techniques.

go-clr

Fri, 01 Jan 2021 00:00:00 +0000

A proof-of-concept Go package for hosting the Common Language Runtime (CLR) and executing .NET assemblies from Go.

Merlin (Mythic)

Tue, 01 Jun 2021 00:00:00 +0000

Cross-platform post-exploitation HTTP Command & Control agent written in Go, integrated with the Mythic C2 framework.

Oddments

Sat, 01 Jan 2022 00:00:00 +0000

A collection of miscellaneous Go utilities and tools.

Sage

Mon, 01 Jan 2024 00:00:00 +0000

Sage is a virtual Mythic agent that uses an AI agentic system to operate Mythic and Mythic agents running on compromised hosts. Built with LangChain and integrates with Arize Phoenix for observability.

AI Red Teaming Still Comes Back to Identity, Access, and Attack Paths

Mon, 06 Apr 2026 00:00:00 +0000

Red Teaming AI Systems with SpecterOps

Thu, 26 Mar 2026 00:00:00 +0000

Event: Risky Business — Soap Box Channel: Risky Business Media

The Veteran Advantage: How Military Service Shapes Cybersecurity Leadership

Tue, 06 Jan 2026 00:00:00 +0000

Merlin's Evolution: Multi-Operator CLI and Peer-to-Peer Magic

Wed, 15 Nov 2023 00:00:00 +0000

Offensive Security Guide to SSH Tunnels and Proxies

Thu, 22 Apr 2021 00:00:00 +0000

Inside the Magic — A Merlin Walkthrough

Wed, 01 Jan 2020 00:00:00 +0000

Event: SO-CON 2020 Host: SpecterOps

Merlin v0.8.0 Released

Wed, 28 Aug 2019 00:00:00 +0000

Merlin Goes OPAQUE for Key Exchange

Tue, 20 Aug 2019 00:00:00 +0000

Merlin v0.7.0 Release & Roll-up

Fri, 12 Apr 2019 00:00:00 +0000

Merlin — Black Hat USA 2018 Arsenal

Wed, 08 Aug 2018 00:00:00 +0000

Merlin v0.6.0 Beta Released

Tue, 07 Aug 2018 00:00:00 +0000

Merlin Adds Support for the QUIC Protocol

Tue, 31 Jul 2018 00:00:00 +0000

HTTP/2 Magic with Merlin

Fri, 01 Jun 2018 00:00:00 +0000

Event: BSides Knoxville Host: BSides Knoxville

Metasploit Module: SMB Delivery

Wed, 30 May 2018 00:00:00 +0000

Merlin Adds DLL Agent & PowerShell Invoke-Merlin Script

Thu, 22 Mar 2018 00:00:00 +0000

Merlin v0.1.4 Released — Menus & Modules

Thu, 15 Mar 2018 00:00:00 +0000

Merlin Adds Module Support

Tue, 13 Mar 2018 00:00:00 +0000

PowerShell for Cyber Warriors

Sat, 04 Jun 2016 00:00:00 +0000

Event: BSides Knoxville 2016

Common Network Penetration Testing Techniques

Tue, 01 Mar 2016 00:00:00 +0000

About

Mon, 01 Jan 0001 00:00:00 +0000

Hi, I’m Russel Van Tuyl.