@Rogunix
Joined August 2010
  • Tweets4.3K
  • Following469
  • Followers1.5K
29Media
lol whole new calling conventions for PIC literally a day after I release my kit 😅 aff-wg.org/2025/10/13/weedin…
1
22
102
8,545
[Crystal Kit] Evasion kit for Cobalt Strike. github.com/rasta-mouse/Cryst…

GitHub - rasta-mouse/Crystal-Kit: Evasion kit for Cobalt Strike

Evasion kit for Cobalt Strike. Contribute to rasta-mouse/Crystal-Kit development by creating an account on GitHub.

github.com
6
85
2
321
22,229
New blog from me on using CLR customizations to improve the OPSEC of your .NET execution harness. This includes a novel AMSI bypass that I identified in 2023. By taking control of CLR assembly loads, we can load assemblies from memory with no AMSI scan. securityintelligence.com/x-f…

Being a good CLR host – Modernizing offensive .NET tradecraft | IBM

Learn how red teams can modernize their use of .NET assemblies using CLR customizations.

ibm.com
13
146
5
419
55,481
I've been getting questions about this again recently, so I wrote a small post. Patching .NET functions from an unmanaged CLR harness: outflank.nl/blog/2024/02/01/…

Unmanaged .NET Patching | Outflank

Modify managed functions from unmanaged code

outflank.nl
2
41
1
106
16,676
We just released Reflective Call Stack Detections and Evasions! This was co-authored by our @XForce Red intern Dylan Tran @d_tranman! Dylan is wicked smart and it was fun working with him! Check it out!🥷 securityintelligence.com/x-f…

Reflective call stack detections and evasions | IBM

Dive into how X-Force Red experts created hypothetical detections that could be implemented to detect publicly disclosed active call stack evasion techniques.

ibm.com
14
146
5
378
91,003
New blogpost by @0vercl0k: "Competing in Pwn2Own ICS 2022 Miami: Exploiting a zero click remote memory corruption in ICONICS Genesis64" doar-e.github.io/blog/2023/0…
2
40
97
11,164
Wrote a blog post for my company on how we implement obfuscation for our C# post-exploitation arsenal. Discussing some detection opportunities and our ways around them. Special thx to @Flangvik for his video on SharpCollection, which is our pipelines base r-tec.net/r-tec-blog-net-ass…

.NET Assembly Obfuscation for Memory Scanner Evasion

This blog post will give a short overview of how in-memory .NET assembly execution commonly works and what detection mechanisms exist.

r-tec.net
7
151
1
392
53,044
I have posted the slides for the #BlackHat talk @chompie1337 and I gave yesterday -> Close encounters of the advanced persistent kind: Leveraging rootkits for post-exploitation github.com/FuzzySecurity/BHU…
14
234
7
669
105,039
Lo prometido es deuda, el research sobre el CVE-2023-28252 ya esta publicado con su PoC junto a la explicacion detallada del reversing que hicimos con mi amigo @solidclt. github.com/fortra/CVE-2023-2… Mas dificil que barrer escaleras para arriba. Ojala les sirva.

GitHub - fortra/CVE-2023-28252

Contribute to fortra/CVE-2023-28252 development by creating an account on GitHub.

github.com
8
87
3
227
23,982
Short write-up on baby's first UAF challenge h0mbre.github.io/PAWNYABLE_U…. Post is meant to serve more as an advertisement for pawnyable.cafe/linux-kernel/. It was a great resource for me to get started on Linux Kernel exploitation. Also I need a new blog layout yikes
5
28
132
Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field. Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! jhalon.github.io/chrome-brow…

Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals

Web browsers, our extensive gateway to the internet. Browsers today play a vital role in modern organizations as more and more software applications are delivered to users via a web browser in the...

jhalon.github.io
16
461
13
1,469
a beautiful write-up : CVE-2022-1786 A Journey to the Dawn blog.kylebot.net/2022/10/16/…

[CVE-2022-1786] A Journey To The Dawn

IntroductionBack in April, I found a 0-day vulnerability in the Linux kernel and exploited it on Google’s kCTF platform.I reported the bug to Linux kernel security team and helped them fix the vulnera

blog.kylebot.net
8
30
This is probably the most complex exploit I've done so far. A UAF in Android kernel freed by kfree_rcu (introduces a delay) in a tight race + kCFI + Samsung RKP. Yet its still possible to gain arbitrary kernel RW, disable SE and root from untrusted app. github.blog/2022-06-16-the-a…

The Android kernel mitigations obstacle race

In this post I’ll exploit CVE-2022-22057, a use-after-free in the Qualcomm gpu kernel driver, to gain root and disable SELinux from the untrusted app sandbox on a Samsung Z flip 3. I’ll look at...

github.blog
4
160
4
500
Up your security research skills: This Windows LoadLibrary port for Linux by @taviso is a great project to contribute to. You'll learn how *both* OS's work internally. Use it to fuzz Win binaries faster on Linux github.com/taviso/loadlibrar…

GitHub - taviso/loadlibrary: Porting Windows Dynamic Link Libraries to Linux

Porting Windows Dynamic Link Libraries to Linux. Contribute to taviso/loadlibrary development by creating an account on GitHub.

github.com
5
109
3
407
Do you want to learn how to find vulnerabilities in Google Chrome? @Nosoynadiemas just released the last exercise of Fuzzing101! github.co/3s8m12H
138
2
396
I just released more details about the recent Samba (pwn2own) vulnerability. #CVE-2021-44142. as hot 🔥 as still being reserved on Mitre. 🙃 writeup: 0xsha.io/blog/a-samba-horror… PoC (level-0) : gist.github.com/0xsha/085903… 1/2
5
197
4
527
Here are the slides from the "Attacking JavaScript Engines in 2022" talk by @itszn13 and myself @offensive_con. It's a high-level talk about JS, JIT, various bug classes, and typical exploitation flows but with lots of references for further digging! saelo.github.io/presentation…
6
252
9
719
Check my first blog about alternative process injection without allocating new memory to bypass EDR. netero1010-securitylab.com/e…
7
138
348
Morning! Just pushed a new blog post that's intended to be the first in a series using LibAFL to solve Fuzzing101 exercises. I've been wanting to dig in to LibAFL for awhile and learning the library "in the open" seemed like a fun idea. epi052.gitlab.io/notes-to-se…

Fuzzing101 with LibAFL - Part I: Fuzzing Xpdf | epi's notes-to-self

Part one of a series covering fuzzer development using LibAFL

epi052.gitlab.io
3
114
2
299
SecureAuth #Impacket 0.9.24 is now available. Discover the new features including ways to dig deeper into #ADCS, a more hardened #SMB server and delegation features. Read the blog by @0xdeaddood: ow.ly/ZB4550GzycC #offensivehacking
49
1
110
Load more