Posts

2025

Unpacking the AAD Broker LocalState CacheSeptember 30, 2025
Full Fat ShellcodeApril 10, 2025

2024

Loader Lock Ownership SemanticsNovember 23, 2024
Fixing a bug in donutOctober 9, 2024
Why is there a debug directory in my release build?September 29, 2024

2023

CVE-2022-43997 - Local Privilege Escalation in Aternity AgentJanuary 23, 2023

2022

Dealing with Failure: Failure Escalation Policy in Unmanaged CLR HostsMay 10, 2022

2021

Detecting Manual Syscalls from User ModeFebruary 10, 2021

2020

Designing Emulation Resistant Control FlowDecember 17, 2020
MemFuck: Bypassing User-Mode HooksSeptember 8, 2020
Static Detection of Portable Executable FilesSeptember 1, 2020
Fuzzing the Windows API for AV EvasionJuly 7, 2020

2019

TRunPESeptember 26, 2019

2016

ShellcodeStdioMay 2, 2016