Bring Your Own Interpreter (BYOI): The Trusted Host
Interpreters are signed, trusted, and used everywhere, making them the perfect hiding spot. This post turns Bun into a fully in-memory C2: a fetch-eval one-liner for initial access, modular TypeScript post-exploitation, a BOF/COFF loader ported to TypeScript, and even a SOCKS proxy compiled to WASM.