The Problem Nobody Talks About You buy a Philips Hue bulb. A lightbulb. You screw it in, connect it to the app, and think nothing of it. What you don’t see: every 2 minutes, that lightbulb sends ...

Challenge Overview McSkidy has been kidnapped, and Wareville’s defenses are compromised. The investigation starts on tbfc-web01, a Linux server processing Christmas wishlists. Somewhere within its...

Disclaimer Before my friends in legal get mad at me - this was all done in my own lab. Everything you’re about to see has been redacted because I actually like my freedom. Don’t try this on stuff...

After messing around with in-memory payloads hidden in images (LSB), I wanted to try something more native - getting code to run just by dropping a DLL. So I started looking into DLL search order h...

Goal This is a personal learning project where I set out to explore how binary payloads can be stealthily hidden inside image files and executed entirely from memory without writing anything obvio...

Executive Summary I investigated a Discord-distributed malware campaign delivering a Python-based infostealer disguised as .zip files. The malware employs Base85 + XOR obfuscation, multiple persis...