https://pr1n5.github.io/I like breaking stuff 2026-06-29T19:36:10+00:00 pr1n5 https://pr1n5.github.io/ Jekyll © 2026 pr1n5 /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-06-26T00:00:00+00:00 2026-06-29T19:35:54+00:00 https://pr1n5.github.io/posts/Cfapi-Cloud-Files/ pr1n5

A couple of weeks ago, I started messing around with some of the techniques used by the LPE BlueHammer, specifically the Cloud Files-related parts. While my goal isn’t to recreate the exploit (mainly because it relies on several other techniques, and reimplementing it from scratch feels completely insane), I was particularly intrigued by everything surrounding the Cloud Files API. I had no idea...

2026-06-07T00:00:00+00:00 2026-06-08T10:22:08+00:00 https://pr1n5.github.io/posts/Named-pipes-nightmare/ pr1n5

Over the last couple of weeks, I’ve been messing around with one of the Windows API features that had been sitting on my to-do list for a while, Named Pipes. If you don’t know what they are, they’re basically channels that processes use to exchange information. They work through a file-like interface (kind of like Linux FIFOs) and, best of all, they can even be used to communicate with remote p...

2025-05-10T00:00:00+00:00 2026-06-08T10:22:08+00:00 https://pr1n5.github.io/posts/persistance-with-kernel-modules/ pr1n5

In this post, I’m going to explain the idea behind this module, its applications, and some interesting things I discovered while working on it. Then, I’ll show you a PoC of this file, followed by some additional considerations and some few upgrades I think could be interesting to implement. Before things went downhill Chronologically, this module is the first piece of “malware” I’ve created —...

2025-04-20T00:00:00+00:00 2025-04-21T14:42:53+00:00 https://pr1n5.github.io/posts/rats-over-my-wire/ pr1n5

In this post, I’m gonna walk you through how I built my own custom RAT (Remote Access Trojan). I’ll show you how many detections it got on VirusTotal, and give you a quick PoC so you can see it in action. After checking out the code, I’ll also throw in a few ideas on how to tweak it to dodge more defenses. Initial Thoguhts and Goals First of all, let’s define a RAT as a Remote Access Trojan. ...