Featured research / 2025
GOst in the Protocol
Three lab-observed JARM signatures and a four-stage yamux verification method for narrowing candidate Ligolo proxies.
Cyber operations, reimagined.
We build world-class cyber capabilities that put operational experience into software.
Our thesis
Cyber capability.
At a new scale.
Led by special operations veterans, Necromancer is building the intelligence layer for the next generation of cyber operations: where capabilities connect, decisions accelerate, and every mission makes the next stronger.
For operators
Local agents that coordinate tools, with operators directing and reviewing the work.
For analysts
Quickly and efficiently correlate operational data grounded in evidence.
For leaders
Get mission data, compress the decision loop, and ensure confidence in action.
Open work
Open source tools
and research.
A selection of our public tools and technical research.
Embedded debug bridge
embbridge
Shell access, file transfer, firmware dumping, and multi-device workflows for embedded targets.
Command framework
gocmd2
A modular framework for operator-facing command applications.
Static TFTP server
utftp
A small, static TFTP server with no runtime dependencies.
Serial bootstrap
uart-push
UART file transfer and embbridge bootstrapping for constrained targets.
Start a conversation
The mission is changing. The software should too.
For mission owners, technical partners, and investors building what comes next.