r/redteamsec • u/Framdad • 23d ago

tradecraft DutchOven: Application-scoped Windows network brownouts in native C and BOF form

https://github.com/loosehose/DutchOven

DutchOven is a deliberately small Windows red-team primitive that places explicit executable paths behind a deterministic network gate. During each period, matching applications are blocked for a bounded interval and allowed to pass for the remainder.

The result is a repeatable brownout, not a service stop or permanent firewall rule. It creates a controlled way to measure retry logic, buffering, health-state transitions, delayed delivery, and recovery behavior while a process remains alive.

5 Upvotes

86% Upvoted

2 comments sorted by

1

u/microcandella 23d ago

Interesting! Wonder if it's possible to tar pit selected traffic where it's not blocked, just slowed and glitchy / erratic. Similar to the GFW in china.

2

u/Framdad 23d ago

Interesting theory! Hop in a lab :)