• GetEnvironmentVariable as an alternative to WriteProcessMemory in process injections https://x-c3ll.github.io/posts/getenvironmentvariable-process-injection/ 4 comments 29/5/2020 netsec
• Tunneling traffic through MySQL service (or your mysqld is my new SOCKS5) https://x-c3ll.github.io/posts/pivoting-mysql-proxy/ 3 comments 7/12/2019 netsec
• Isolating the logic of an encrypted protocol with LIEF and kaitai https://x-c3ll.github.io/posts/blackbox-lief-kaitai/ 3 comments 5/11/2019 netsec
• Building C&Cs with DNS communication in few minutes https://x-c3ll.github.io/posts/dns-endpoint-exfiltration/ 6 comments 12/11/2018 netsec
• Beyond pty.spawn - use pseudoterminals in your reverse shells (DNScat2 example) https://x-c3ll.github.io/posts/forkpty-dnscat2/ 10 comments 9/5/2018 netsec
• Parasiting web server process with webshells in permissive environments https://x-c3ll.github.io/posts/parasite-web-server-process/ 5 comments 25/2/2018 netsec
• Loading "fileless" Shared Objects (memfd_create + dlopen) https://x-c3ll.github.io/posts/fileless-memfd_create/ 4 comments 13/2/2018 netsec