Blog: Write-ups, Research & More

Yesterday's Router, Today's Pivot!

description: Hunting Residential Threats and Fighting Automated Botnets

tags: Threat-Intel, Linux, Oaks-Internet-Safari

date: 2025-05-29

author: OakAtsume

Stupid bash tricks- command substitution, command injection, and the bash command prompt

description: It turns out you can use special characters in linux names. What could possibly go wrong?

tags: linux, shell, bash, command injection, parsing, langsec

date: 2025-01-28

author: MalcolmS

Writing research posts

description: This guide will go over all the details and steps required to post a research article.

tags: How to, Tutorial

date: 2021-11-03

author: Pips

Quirks in the Windows IPv6 address parsing and printing APIs

description: Half of the world still lacks Internet access, but there are no IPv4 addresses left to hand out - which means that software libraries for IPv6 deserve scrutiny now.

tags: research, WINDOWS API, IPv6

date: 2020-12-04

author: Alex Henrie

DLL injection - Developing a simple injector.

tags: how to, DLL Injection, Windows Hacking, Development, memory, Windows API

date: 2019-02-07

author: th3v0id

Exploiting a Stack Buffer Overflow (ret2libc method)

tags: research, memory, how to, buffer overflow

date: 2019-01-18

author: th3v0id

i didn't hack my christmas tree lights

tags: research, networking, IOT

date: 2018-12-27

author: kimb3r

How I accidentally became a domain broker

tags: Story, domains

date: 2018-12-20

author: Pips

A 9-step recipe to crack a NTLMv2 Hash from a freshly acquired .pcap

tags: how to, pcap

date: 2018-12-18

author: kimb3r

"Makefiles, but in English: Part 1"

description: Make is intelligent enough to be able to distinguish between them at runtime. But it's probably best to avoid storing different types in a variable.

tags: how to, Makefile

date: 2018-12-13

author: David Freitag

"Biohacking: New VivoKey Spark Implant"

tags: biohacking, RFID

date: 2018-12-12

author: Pips

An easier SaltLAN

description: My family does an annual LAN Party and one of the biggest complaints we have is that Steam takes ages to download for everyone.

tags: how to, tutorial, networking, gaming, Docker, Steam, DNS

date: 2018-11-28

author: bashNinja

Reverse engineering a 4 layer PCB, the slow and destructive way

description: Excitement! There was a sketchy padded envelope in the mail today. Where do we go next?

tags: EE, RE

date: 2018-11-16

author: David Freitag

Phishing/Scam campaign research (ep. 2)

description: I got another email. This one was interesting, the email was the standard "we had a rat on your computer that we used to take dirty pictures of you, give us money or we will send it to all your contacts".

tags: research, phishing

date: 2018-10-31

author: Pips

ASCII art in hidden places

description: Hiding data in new and interesting places has always been a fun objective for anyone who likes creating and solving challenges. One of the interesting secret hiding places for data I like to use is server headers.

tags: research, how to

date: 2018-10-31

author: Pips

Phishing/Scam campaign research

description: An email came in that an end user thought was suspicious. The end user passed it up to one of our team members, who then passed it up to me.

tags: research, phishing

date: 2018-10-27

author: Pips

Access-control exploitation (part 1)

description: One job I was tasked with was getting a fingerprint-based reader tested and operational for demoing our new level of hardware support for more secure facilities, 2 factor physical access control; something you are (fingerprint) and something you know or have. (pin/card)

tags: research, RFID

date: 2018-10-25

author: Pips