Posts on defensive-security
9 posts on defensive-security. Notes from public sources and my own test lab.
Jumping to Address 0x41414141: What Do You Do When the Patch Isn't Out Yet?
Seeing 0x41414141 in the EIP register means you're already past the 'get well soon' phase. Let's dive into the anatomy of zero-days and how to survive the gap before a patch is released.
What Really Happens When You Open That File? A Peek Into the Malware Analysis Kitchen
A deep dive into the world of malware analysis, from static inspection to dynamic behavioral tracking, shared through the lens of real-world experience and a few 'oops' moments.
Not a Time Bomb, but a Ghostly Shadow: The Reality of Zero-Days and the Night We Wait for the Patch
A deep dive into the reality of Zero-Day vulnerabilities from a Red Teamer's perspective—why waiting for a patch is no longer a luxury and how we handle those hidden tunnels in our systems.
The Black Widow in the Box: Is a 'Sandbox' Enough for Malware Analysis?
Is a clean VirusTotal report enough? Join me as we dissect malware through static and dynamic analysis, and see why today's threats are smarter than your average sandbox.
What’s Inside the Box? Shedding Light into Darkness with Malware Analysis
A deep dive into why relying on file hashes is no longer enough and how to safely dissect modern threats using static and dynamic analysis techniques.
Smart Devices, Dumb Security: IoT Backdoors and Silent Takeovers
From a coffee machine trying to talk to a Domain Controller to hardcoded secrets in firmware, let's dive into the Wild West of IoT security from a Red Teamer's perspective.
The Browser's Dark Alleys: DOM-Based XSS and the 'It Won't Happen to Me' Delusion
We've spent years hardening our servers, but the battlefield has shifted to the client-side. Let's dive into why your modern SPA might be more vulnerable than you think, focusing on the subtle danger of DOM-based XSS.
Stop Playing in the Sandbox: Facing the Realities of Malware Analysis
Relying solely on automated sandboxes is a trap. Let's dive into the real-world mindset of malware analysis, covering entropy, static inspection, and why your automated tools might be lying to you.
The Silent Betrayal of the Cache: Web Cache Poisoning via Unkeyed Headers
Ever wonder how a performance booster like Varnish or Cloudflare could be turned against your users? Let's dive into the world of unkeyed headers and see how a simple X-Forwarded-Host can lead to a full-scale JavaScript injection.