Blog posts

Sshimpanzee, a reverse SSH tool with encapsulation feature.

This second part will focus on the 'jump' command in Cobalt Strike, used to establish a connection from a compromised system to the command and control (C2) server.

Cobalt Strike Investigation - Part 1

This article is a step-by-step guide to reverse an APK protected with DexGuard using Jadx

Avoslocker analysis

This short blog post is about the minor changes introduced in the version 1987 of DanaBot.

This article is a deep dive into the Dridex Loader

This article is a deep dive into the IOCP and encryption process from LockBit in depth.