Mhammad Al Abdulla·Oct 19From SQL Injection to SYSTEM on Azure IIS — Beating the EDR with In-Process MagicHow one bad SQL parameter became NT AUTHORITY\SYSTEM, why the EDR never caught us, and how we ended up with a web-based file manager…
Muhammad Sameer·Sep 29Understanding Windows Offensive Development: From WinAPI to EDR EvasionWindows is one of the most interesting platforms to study from an offensive security perspective.
Mat Cyb3rF0x Fuchs·Sep 28When CreateProcess Is the WritePlenty of detection stacks still treat “no VirtualAllocEx, no WriteProcessMemory” as “no injection.”
Jay Tiwari·Sep 26DDE Callback Hijacking -A Process Injection TechniqueI’m Jay, a student exploring the offensive security space with a focus on red teaming and malware development. I spend my time studying…
