posts

• apr 17, 2025 reverse engineering malware in a container - part 1
• apr 9, 2025 clusterfuck: attack sims on k8s clusters
• dec 13, 2024 PEB walking off the beaten path
• dec 1, 2024 hooking functions to hide system artifacts
• nov 23, 2024 advanced memory protection bypasses, part 2: bypassing DEP
• nov 9, 2024 advanced memory protection bypasses, part 1: bypassing ASLR
• nov 6, 2024 exploiting driver-based vulnerabilities
• oct 25, 2024 advanced evasions, part 2: implementing minidump structures
• oct 8, 2024 credential access in macOS
• oct 7, 2024 advanced evasions, part 1: PE maps + custom minidumpers
• oct 7, 2024 reading list [updated]
• sep 29, 2024 sunday scaries: exploiting web apps
• sep 27, 2024 cosmos, part 2: domain + forest compromise
• sep 19, 2024 cosmos, part 1: red-teaming corporate active directory forests
• aug 26, 2024 goL0: reverse engineering + malware analysis
• aug 12, 2024 goPro: detecting process hollowing with Go
• jan 18, 2024 neverMind
• jan 2, 2024 cookieJar
• dec 21, 2023 violaTor
• dec 7, 2023 tcpSACK
• nov 27, 2023 gdbExtract
• oct 23, 2022 gatekeeper (buffer overflows)
• jan 8, 2022 jenkins
• jan 8, 2022 update
• nov 10, 2021 tryhackme: ra
• oct 27, 2021 tryhackme: overpass2
• oct 26, 2021 tryhackme: game zone
• oct 24, 2021 intro to hacking
• feb 15, 2021 cracks