Mhammad Al Abdulla·Oct 19From SQL Injection to SYSTEM on Azure IIS — Beating the EDR with In-Process MagicHow one bad SQL parameter became NT AUTHORITY\SYSTEM, why the EDR never caught us, and how we ended up with a web-based file manager…
Muhammad Sameer·Sep 29Understanding Windows Offensive Development: From WinAPI to EDR EvasionWindows is one of the most interesting platforms to study from an offensive security perspective.
Mat Cyb3rF0x Fuchs·Sep 28When CreateProcess Is the WritePlenty of detection stacks still treat “no VirtualAllocEx, no WriteProcessMemory” as “no injection.”
Jay Tiwari·Sep 26DDE Callback Hijacking -A Process Injection TechniqueI’m Jay, a student exploring the offensive security space with a focus on red teaming and malware development. I spend my time studying…
Qalique·Sep 25lethe_amsi_veh: Bypassing AMSI Without Patching amsi.dll (Part 3)Bypassing AMSI from inside shellcode, without touching a single byte of amsi.dll
Zied Sayari·Sep 23Beyond the Hook: Bypassing My Own EDR with Direct SyscallsUnderstanding how adversaries bypass endpoint monitoring is essential for building robust security software. In this post, I demonstrate…
Jay Tiwari·Sep 22ODPC Course and Exam ReviewI’m Jay, a student who spends most of his time on red teaming and malware development. I enjoy understanding how security products detect…A response icon1A response icon1
Abhishek Chaudhary·Sep 9I Bypassed CrowdStrike With a Compiler It Already Trusted — AI Found the Way InA week inside a hardened, dual-EDR enterprise: AI-assisted recon opened the door, and native tooling the EDR trusts carried it all the way…
