Gaining Initial Access and Outsmarting SmartScreen
I’ve had a number of people ask me what approaches I have taken to secure that initial foothold on a machine/network during a pentest engagement. Well, the ...
Living off the Process
Hello again everyone! Hope the start to the new year is treating you well. I am excited to share a new blog post with you! Furthermore, I’d consider the c...
Evading Signature Based Memory Detection - Shellcode Fragmentation and Staged Reassembly
Hey everyone, and hope the holiday season is treating you well! 🎅🎄🎁 I’ve been sitting on this blog post for quite some time now and it’s high time I went a...
PIC Shellcode from the Ground up - Part 2
Let’s PIC back up where we left off shall we? 😸 I gave you the framework for developing PIC friendly shellcode back in Part 1. We went from the original cod...
PIC Shellcode from the Ground up - Part 1
Have you ever wondered how the popularized PIC (position independent code) actually works? I can answer that question alongside you with a resounding YES! Y...