Research & Write-ups

Technical Blog

Deep technical dives, vulnerability disclosures, and state-of-the-art offensive tradecraft from the collective.

An in-depth guide on direct system calls in Windows to evade API hooking, featuring complete C implementations and telemetry bypass techniques.

Detecting and mitigating Kerberoasting and AS-REP Roasting attacks in enterprise networks using custom SIEM rules.

Decompiling MIPS architecture binaries to uncover command and control infrastructure and identifying zero-day propagation methods.

A deep dive into JIT compilation vulnerabilities, out-of-bounds access, and writing reliable exploits for Chromium-based browsers.