research
Game of Hide and Seek: Detecting Dynamic API Resolution at Runtime With Aether
Introduction Welcome to the second blog post exploring the new capabilities of the Aether v0.9 stable release. Following the beta launch(v0.8), the…
security research & development (SRD)
Aether: memory forensics and threat hunting tool
Introduction I started building this tool a few months ago purely out of curiosity just to see if I could hunt for…
Malware Research
Implementing Hell’s Gate in Zig – Part 1
Introduction Hello, fellow Zig programming enthusiasts! In this blog post, I’ll walk you through the process of implementing of well-known and classic…
offensive
The Hidden Risk: Compromising Notepad Cowriter’s Bearer Tokens
Introduction In 2023, Microsoft launched Copilot for Office 365. Recently, they expanded its functionality to include integration with Notepad in 2025, allowing…
Uncategorized
How I Leveraged WMI to Enumerate a Process Modules and Their Base Addresses
Introduction In this blog post, using WMI we’ll leverage Windows Management Instrumentation (WMI) to extract the loaded modules of a specific process…
offensive
Navigating Embedded Payload Extraction from RDP Files – Defence evasion
Introduction This blog post will explore how to embed malicious payload into the RDP configuration file. By leveraging the innate properties of…
security research & development (SRD)
Backdoor discovered in PLDT home fiber routers
MITRE : CVE-2022-46637 Advisory: exploit Intro Last October, I was planning to visit the philippine to get some rest away from work…
PAS c2c
Building mini c2c in Pascal – part 3
introduction and here we are in part three of this series, and in this blog post, I am going to finish the…
PAS c2c
Building mini c2c in Pascal – Part 2
In memory of Terry Davis (August 11, 2018) an idiot admire complexity, a genius admires simplicity Terry Davis In this part, I…
PAS c2c
Building mini c2c in Pascal – Part 1
Introduction Over a while, the development of c2c has increased rapidly, including the number of new commercial frameworks, which I will not…