Threat Detection

EDR Simulation — Hunting for Process Injection with API Monitoring

Hello World,

Malware

Hunting for Rootkits in memory

Hey Squad,

Threat Detection

Memory Analysis for Process Injection

Hey Squad,

Digital Forensics

Timeline Creation for Forensics Analysis

Hi Squad,

Application Security

Authenticated Arbitrary File Upload leading to RCE on Poultry Farm Management System 1.0

Poultry Farm Management System 1.0 allows an authenticated user to upload a PHP file via /Redcock-Farm/farm/product.php. Exploiting this…

Application Security

CSRF on Poultry Farm Management System 1.0

Poultry Farm Management System 1.0 suffers from CSRF attack via /Redcock-Farm/farm/userregister.php. Exploiting this issue allows an…

Application Security

How I found CVE-2022–40088

Hey Squad,

Exploit Development

Windows Shellcoding

Hey Squad,

Exploit Development

Windows Exploit Development: Egghunting

Hey Squad,

Exploit Development

Fuzzing for bugs — 101

Hey Squad,

Exploit Development

Windows SEH Overflow (MP3 Studio) — With SEH basics

Let’s first discuss what Exception Handlers actually are, the different varieties, and what function they provide inside the Windows OS…

Exploit Development

Reverse Engineering Series — 4 (crackme)

Hi Squad,

Exploit Development

Low-Level (Assembly) Language for Reverse Engineering

Assembly language is the primary skill that each reverse engineer has to have before they can do their work. The ABCs of reversing may be…

Network Security

Just enough Suricata for Starters

Suricata is a high-performance, open-source network analysis, and threat detection software used by most private and public organizations…

Malware

Malware Behaviour Analysis — 101

Malicious software is the simplest definition of malware. Once malware has penetrated your system environment, you would anticipate…

Exploit Development

Reverse Engineering Series — 3

part 1 : https://gowthamaraj-rajendran.medium.com/reverse-engineering-series-1-1a40eba00bc

Exploit Development

Reverse Engineering Series — 2

Hey Squad,

Exploit Development

Reverse Engineering Series — 1

Hey Squad,

Malware

How to analyze malicious documents — Case study

We will be doing analysis on Microsoft documents used in real life attacks. The document is a .docx file that was used to attack Ukrainian…

Malware

Analyzing Malicious Microsoft Office Documents

Hi squad,

Exploit Development

Linux x64 ASLR Bypass

Hey Squad,

Exploit Development

Linux x64 NX Bypass (ret2libc + ROP)

Hey Squad,

Threat Detection

Zero Trust in Microsoft Azure 1— “never trust, always verify.”

Hi Squad,

Exploit Development

Linux x64 Basic Stack Overflow

Hey squad,

Red Teaming

Primer on Active Directory for OSCP/OSEP/CRTP/CRTE

Hey Squad,