██████████                                                                                                                                  
      ███████████████████       ██                                                  ██                                                       ███      
    █████████████████████    █████                                              ██████                                                    ██████      
   ██████████   ███████    ███████                                             ███████                                                   ███████      
   ████████         ██     ███████                                             ███████                                                   ███████      
   █████████            ███████████████  █████████████      █████████████   ███████████████  ███████████  ██████ ██████ █████████████ ███████████████ 
   ███████████████      ████████████████████████████████  █████████████████ █████████████████████████████ ███████████████████████████████████████████ 
    ███████████████████ ███████████████ █████████████████  █████████████████████████████████████████████  ██████████████████████████████████████████  
      ███████████████████  ███████               ████████            ███████   ███████    ███████         ████████              ████████ ███████      
          ████████████████ ███████       ████████████████   ████████████████   ███████    ████████████    ███████       ████████████████ ███████      
                ██████████████████     ██████████████████ ██████████████████   ███████     ██████████████ ███████     ██████████████████ ███████      
    ████         █████████████████    ████████    ███████████████    ███████   ███████        ███████████████████    ███████    ████████ ███████      
  ███████████ ████████████ █████████  ███████    ███████████████    ████████   ████████    ██     ███████████████   ████████   █████████ ████████     
 ████████████████████████  █████████████████████████████████████████████████   ██████████████████████████ ███████    ███████████████████ ████████████ 
   ████████████████████     ██████████ ██████████████████ ███████████████████   ████████████████████████  ███████    ███████████████████  ██████████  
       █████████████           ███████   ███████  ████████  ███████  ████████     ███████  ███████████    ███████      ███████  ████████    ███████

Always doing something i guess. Taking things apart and always having a few screws left over. I think that applies pretty well to my software skills, too.

Selected Work

icmp_communication Covert communication channel over ICMP packet sizes. Instructions are encoded in the echo request length no payload used.
tor_keep Tor connection monitoring and keep-alive utility.

Projects

Learning for the eLearnSecurity Junior Penetration Tester certification. Also I need to learn a lot to code SignStrike. There for I am reading Windows-Internals.

About me

Love pushing software and hardware to the limit and then making braking it even faster and more efficient.

I'm STAATSRAT some guy from somewhere in the world. I'm fascinated by almost anything complex. Most of the time, though, I'm either too lazy or I just don't have the drive to really immerse myself in one specific field. Even so, computers fascinate me the most. How we started out with some rocks and fire, and somehow ended up staring at glowing electric slabs that know exactly what to show us, because a tiny piece of silicon, no bigger than a fingernail, packed with millions of transistors spaced just atoms apart, told them to.

Journal

A small Journal.
October 7, 2026

Trying to get my staatsrat... .onion address, currently 447,808,251,134 possible addresses have been tried. It's crazy that I get a match for "staat" in a few seconds and with 4 more letters it gets to 32⁴ and it takes an estimated 2 days with GPU and CPU.

October 15, 2026

Today I added a kill function to nostos so that an administrator can remotely terminate nostos. Unfortunately, I still don't have a staatsrat .onion address.

October 16, 2026

I finally found a staatsrat .onion address, actually even two, but it really took forever.

October 22, 2026

I thing I am gonne bould a honeypot to get some ips of other servers trying to check out my honeypot.

October 23, 2026

I remembered my ISP doasnt give me an Ipv4 address anymore only Ipv6 so I dont think the honeypot idea realy works that well.

November 3, 2026

Currently doing some other stuff :(.

Cheers

Nostos

butterly

Nostos is a pogramm that executes the page source of whatever page you enter. Obviously, it should be a website that you own and where the page source code consists of a valid command. The program checks every 10 seconds whether the command on the page has changed. If so, the program executes the new command. If the command is the same as before, the program will just wait till the command changes. It also has a kill option so a administrator can kill nostos using stop_nostos. What's still missing is persistence and the ability to control the sleep function. Of course, there are many other things, but I'll take care of it later.
V2 now uses an API gu get the commands in a way cleaner way. But it can also use the same API to also upload the output. Currently onlay the code for POST und GET requests is implemented but they are not used.
See: https://github.com/Staatsrat/nostos

Guides

Write-ups and practical guides.

Golden VM A practical guide for creating an isolated Windows malware-analysis environment with Hyper-V.