RPC backdoor: implementing and detecting a backdoor

DCE/RPC (Distributed Computing Environment / Remote Procedure Call) is a protocol that is often used in the enterprise. And with good reason: it’s at the heart of Active Directory and Microsoft environments. The extensions added by Microsoft form MSRPC. How DCE/RPC works Note that there are other well-known remote procedure call systems, such as gRPC (Google implementation) — which is based on a modern stack (HTTP/2 + Protobuf). ...

January 22, 2026 · NobisD

Deploying an Active Directory lab with ludus on Proxmox

Having your own lab, whether at work or at home, is the promise of progress: being able to break things and start again, train, develop, and test attacks and tools. However, setting up a lab can be long and tedious. It can take several months to reach a satisfactory result—and it will still be hard to reproduce. Ludus solves this problem: this Ansible-based tool makes it relatively easy to deploy complex labs on hypervisors. ...

December 29, 2025 · NobisD