tl;dr Golang is no C, but its OK. disclaimer: This is a personal opinion. C-nile people please do not hurt me. why would anyone want to do that This is debatable, but: C2 communication is way easier …

Introduction In this blog series, we will cover the topic of rootkits — how they are built and the basics of kernel driver analysis — specifically on the Windows platform. In this first part, we...

Contribute to nettitude/SharpWSUS development by creating an account on GitHub.

— Part I

The pattern matching swiss knife. Contribute to VirusTotal/yara development by creating an account on GitHub.

In this episode, we start with a Windows user mode crash dump file. Our goal is to grab the main executable's segments, clean the segments, find/create the imports table, find the entry point and the original entry point, apply signatures, and other discussions.…

This post details two bugs I found, a plist injection (CVE-2023-27328) and a race condition (CVE-2023-27327), which could be used to escape from a guest Parallels Desktop virtual machine. In this post I’ll break down the findings.

Ghidra 10.3 dropped this week with a dedicated Emulator tool! I’ve been eagerly anticipating such a feature and so I am very excited that…