Omri Baso·Aug 13Microsoft Configuration Manager RCE 0-Day Exploit Chain (SCCM 𝗖𝗩𝗘-𝟮𝟬𝟮𝟲-𝟰𝟳𝟯𝟬𝟭)Hey, My name is Omri Baso I am a 28 years old Security Researcher from Israel — I like researching about Windows, Active Directory, Malware…A response icon2A response icon2
PepperMalware·May 28Analysis of .Net Deucalion IrcBot Sample Obfuscated with ConfuserEx+KoiVMIn this post I perform a quick analysis of a sample that seems to be an ircbot, named alphaircbot (based on the any.run tags) or deucalion…
PepperMalware·May 25Analysis of .Net Stealer GrandSteal (2019–03–18)In this post I share my notes about the analysis of a sample (an stealer written in .Net) whose family is unknown to me (any feedback is…
Life of a Pentester·May 13HSC RTV CTF — Msg Packed (Reversing — 250 pts)This reversing challenge was a little easy considering you know what the MessagePack format is, which is a serialized binary data. Think of…
Life of a Pentester·May 12HSC RTV CTF — Unknown Architect (Reversing — 200 pts)This was an easy one. The title gives the hint of finding the right architecture in which the binary should be run on.
Alessandrolupini·Mar 27Decrypt Sophos SafeStore qurantined fileThis paper documents my journey — frustrating at times, rewarding at the end — into reversing the local quarantine mechanism of Sophos XDR.
CybeCloud·Nov 13, 2025Static Malware Analysis with Remnux (CyberSecurity Bootcamp by CybeCloud)Static malware analysis is where every great cyber defense starts. It’s all about tearing apart a malicious file and reading its digital…
YUCA·Nov 11, 2025Analysis of API Hashing and Import Lookup Techniques for Obfuscated API Resolution in MalwareIn my last malops challenge, RokRAT loader was observed to use API hashing, a technique to use a hash to resolve into Windows API and then…
Aastha Thakker·Sep 25, 2025Reverse Prompting: The AI Strategy Everyone OverlooksTransform your AI interactions from trial-and-error chaos into a systematic success machine.A response icon2A response icon2