2024

October

StealC Malware Analysis Part 1

StealC Malware Analysis Part 2

StealC Malware Analysis Part 3

September

Jupiter X Core Plugin <= 4.6.5 Remote Code Execution (CVE-2024-7772)

Jupiter X Core Plugin <= 4.7.5 Authentication Bypass (CVE-2024-7781)

July

Writing a stealer logs parser

2023

June

XORtigate: Pre-authentication Remote Code Execution on Fortigate VPN (CVE-2023-27997)

CVE-2023-27997 - Forensics short notice for XORtigate

March

Sshimpanzee

Cobalt Strike Investigation - Part 2

2022

September

Cobalt Strike Investigation Part 1

April

Obfuscated obfuscation

March

AvosLocker Ransomware Linux Version Analysis

2021

September

DanaBot Communications Update

April

Dridex Loader Analysis

2020

October

Lockbit analysis

March

Pentesting a banking FTP service

Whitepaper: The Lazarus Constellation - A study on North-Korean malware

2018

October

CVE-2017-11176: A step-by-step Linux Kernel exploitation (part 4/4)

CVE-2017-11176: A step-by-step Linux Kernel exploitation (part 3/4)

CVE-2017-11176: A step-by-step Linux Kernel exploitation (part 2/4)

CVE-2017-11176: A step-by-step Linux Kernel exploitation (part 1/4)