All Posts

Interpreters are signed, trusted, and used everywhere, making them the perfect hiding spot. This post turns Bun into a fully in-memory C2: a fetch-eval one-liner for initial access, modular TypeScript post-exploitation, a BOF/COFF loader ported to TypeScript, and even a SOCKS proxy compiled to WASM.

A detailed guide to emulating advanced phishing attacks on GitHub for Red Team operations, leveraging fake issues and notifications to exploit a TOCTOU race condition, tricking developers into authorizing malicious OAuth apps for initial access while bypassing MFA and using only trusted infrastructure.

Resolve module handle and function address without using GetModuleHandle and GetProcAddress

Writeup of Admirer box on HackTheBox

Writeup of Traceback box on HackTheBox

Writeup of OpenAdmin box on HackTheBox

Writeup of Nest box on HackTheBox

Writeup of Traverxec box on HackTheBox