NAME

tags

- Browse articles by topic and technology.

INDEX

AI tooling

  1. Giving Every macOS App a Security Passport
  2. The Last Engineer in the Loop
  3. Prolog is dead, long live Prolog!
  4. The Agentic Performance Ladder: Python, Native Kernels, and Metal
  5. IDA Free on Steroids: Automating Reverse Engineering with IDC and Codex
  6. Grill me with ASCII
  7. How I contain OSS supply-chain risk with Apple Containers

Apple Containers

  1. Detecting Apple Container from inside the guest
  2. How I contain OSS supply-chain risk with Apple Containers

engineering

  1. The Last Engineer in the Loop
  2. From Problem to Operations: An Engineering Workflow for Security Teams

FreeBSD

  1. One BSD’s fix is another BSD’s bug
  2. Provoke a kernel panic in FreeBSD

incident response

  1. From Problem to Operations: An Engineering Workflow for Security Teams
  2. Never upload ransomware samples to the Internet

macOS

  1. Detecting Apple Container from inside the guest
  2. Giving Every macOS App a Security Passport
  3. The Agentic Performance Ladder: Python, Native Kernels, and Metal
  4. How to write and load shellcode on macOS

malware analysis

  1. Detect API hashing with YARA
  2. Learn how to fix PE magic numbers with Malduck
  3. The malware analyst's guide to PE timestamps
  4. The malware analyst's guide to aPLib decompression
  5. The malware analyst's guide to zlib compression
  6. Never upload ransomware samples to the Internet
  7. How to patch a Windows API in x64dbg
  8. Learn to quickly detect RC4 encryption in (malicious) binaries

reverse engineering

  1. Prolog is dead, long live Prolog!
  2. The Agentic Performance Ladder: Python, Native Kernels, and Metal
  3. IDA Free on Steroids: Automating Reverse Engineering with IDC and Codex
  4. Detect API hashing with YARA
  5. Learn how to fix PE magic numbers with Malduck
  6. The malware analyst's guide to PE timestamps
  7. The malware analyst's guide to aPLib decompression
  8. The malware analyst's guide to zlib compression
  9. How to patch a Windows API in x64dbg
  10. Learn to quickly detect RC4 encryption in (malicious) binaries
  11. How to write and load shellcode on macOS

site notes

  1. It's always DNS
  2. Hello, world, again

systems security

  1. Trap fuzzing: random instructions, real bugs
  2. One BSD’s fix is another BSD’s bug
  3. Giving Every macOS App a Security Passport
  4. Provoke a kernel panic in FreeBSD
  5. How to write and load shellcode on macOS

threat hunting

  1. Passing Microsoft SC-200: Exam and KQL Reference Guides
  2. VirusTotal Hunting Cheat Sheet

virtualization

  1. Detecting Apple Container from inside the guest
  2. Trap fuzzing: random instructions, real bugs

VirusTotal

  1. VirusTotal Hunting Cheat Sheet
  2. Never upload ransomware samples to the Internet

Windows

  1. Learn how to fix PE magic numbers with Malduck
  2. The malware analyst's guide to PE timestamps
  3. How to patch a Windows API in x64dbg

YARA

  1. Detect API hashing with YARA
  2. Learn to quickly detect RC4 encryption in (malicious) binaries