Malware Analysis

Offensive Security

Reverse Engineering

Windows Internals

Malware Development

Explore recommended reads, summarized by AI

Offensive Security Techniques

Technical guides and methods for developing and deploying malicious code and bypassing security systems.

Malware Development Techniques

Popular this week

epersic

DLLParty — Abusing thread pool internals for shellcodeless DLL injection

Jay Tiwari

DDE Callback Hijacking -A Process Injection Technique

Agha Asfandyar Khan

Process Injections are most stealthy attacks if you know how to get them work.

Yiğit Aydemir

Be the EDR, Then Bypass It: Halo’s Gate and Indirect Syscalls — Yiğit Aydemir

Agha Asfandyar Khan

How attackers hide their malicious library files (.dll)

Latest stories

Yiğit Aydemir

Teach the Stack to Lie: .pdata Unwinding and Call Stack Spoofing on x64 — Yiğit Aydemir

Yiğit Aydemir

Be the EDR, Then Bypass It: Halo’s Gate and Indirect Syscalls — Yiğit Aydemir

Yiğit Aydemir

From Syscall to Reflective Loader: Windows Module Loading, Rebuilt from First Principles

Higor Diego

From PowerPC file to flag: taking apart chimera, the binary that wraps another binary (Malware…

epersic

DLLParty — Abusing thread pool internals for shellcodeless DLL injection

See more stories

Who to follow

Popular this week

epersic

DLLParty — Abusing thread pool internals for shellcodeless DLL injection

Jay Tiwari

DDE Callback Hijacking -A Process Injection Technique

Agha Asfandyar Khan

Process Injections are most stealthy attacks if you know how to get them work.

Yiğit Aydemir

Be the EDR, Then Bypass It: Halo’s Gate and Indirect Syscalls — Yiğit Aydemir

Agha Asfandyar Khan

How attackers hide their malicious library files (.dll)

Latest stories

Yiğit Aydemir

Teach the Stack to Lie: .pdata Unwinding and Call Stack Spoofing on x64 — Yiğit Aydemir

Yiğit Aydemir

Be the EDR, Then Bypass It: Halo’s Gate and Indirect Syscalls — Yiğit Aydemir

Yiğit Aydemir

From Syscall to Reflective Loader: Windows Module Loading, Rebuilt from First Principles

Higor Diego

From PowerPC file to flag: taking apart chimera, the binary that wraps another binary (Malware…

epersic

DLLParty — Abusing thread pool internals for shellcodeless DLL injection

See more stories

Who to follow