A couple of weeks ago, I started messing around with some of the techniques used by the LPE BlueHammer, specifically the Cloud Files-related parts. While my goal isn’t to recreate the exploit (main...

Over the last couple of weeks, I’ve been messing around with one of the Windows API features that had been sitting on my to-do list for a while, Named Pipes. If you don’t know what they are, they’r...

In this post, I’m going to explain the idea behind this module, its applications, and some interesting things I discovered while working on it. Then, I’ll show you a PoC of this file, followed by s...

In this post, I’m gonna walk you through how I built my own custom RAT (Remote Access Trojan). I’ll show you how many detections it got on VirusTotal, and give you a quick PoC so you can see it in ...