This post is a continuation of Building a Debugger from Scratch: Part 1 - Windows User-Mode Debugger Core, In this post, I want to continue building our core and implement some interesting and very...

In this Part 1, we will build the Core of a Windows Debugger: Process Creation, Attach/Detach, Event Loop, and Privilege Management Anatomy of dbg_create_process: Creating Processes in Debug Mod...

In this post we will explore the development of a loader in C that uses Windows APIs to retrieve a remote payload via HTTP and execute it directly in memory. In this Post obfuscation techniques wil...

Introduction: In this post I will explore a technique of modification and exploitation of binaries, classified as Code Cave. This technique is nothing more than the exploitation of a memory region...

Introduction In this article, we will explore and implement how AES-256 encryption can be applied to malware payloads, using concepts such as initialization vectors generated randomly on each exec...

Exploiting SEH Overwrite Vulnerabilities in Windows Applications In this post, we’re gonna dig into a vulnerability called SEH Overwrite in a vulnerable software version BlazeDVD 5.0. But, as usua...

Building and Detecting a Backdoor: Dynamic Analysis and YARA Rules This article aims to demonstrate how YARA rules can be used to detect backdoors by combining strong indicator: the presence of Wi...

Exploit Development for Buffer Overflow Hello, in this post I will develop an exploit and simulate a Buffer Overflow (BOF) attack in a practical way. Objective: trigger a Buffer Overflow, overwri...

Process Injection (Remote Thread Injection) using Windows APIs In this article, we’re going to explore Process Injection techniques using Windows APIs. The goal is to understand how API functions ...