“Study hard what interests you the most in the most undisciplined, irreverent and original manner possible.”
Interpreters are signed, trusted, and used everywhere, making them the perfect hiding spot. This post turns Bun into a fully in-memory C2: a fetch-eval one-liner for initial access, modular TypeScript post-exploitation, a BOF/COFF loader ported to TypeScript, and even a SOCKS proxy compiled to WASM.
A detailed guide to emulating advanced phishing attacks on GitHub for Red Team operations, leveraging fake issues and notifications to exploit a TOCTOU race condition, tricking developers into authorizing malicious OAuth apps for initial access while bypassing MFA and using only trusted infrastructure.
Resolve module handle and function address without using GetModuleHandle and GetProcAddress
Writeup of Admirer box on HackTheBox
Writeup of Traceback box on HackTheBox