Qalique·Oct 21No Process, No File: A Linux ELF BOF Loader from Scratch (Part 3)Spawning a new process is the loudest thing an implant can do. BOFs run inside the agent itself, from memory, without a process boundary…
Anshulvairagade·Oct 12A Sliver C2 LabA hands-on walkthrough of setting up Sliver on Kali ARM64 and popping a shell on a Windows 11 VM — told the way it actually happened.
Qalique·Sep 29Calling the CLR Without metahost.h (Part 4)COM is a calling convention on top of function pointers. MinGW doesn’t ship the headers, so ghost_loader ships its own.
Qalique·Sep 25lethe_amsi_veh: Bypassing AMSI Without Patching amsi.dll (Part 3)Bypassing AMSI from inside shellcode, without touching a single byte of amsi.dll
__psaga·Sep 19The New AI Threat Vector: Weaponizing P2P LLM Swarms for Distributed Botnet Command & ControlExecutive Summary
M Haq·Sep 5HireMeLab — CyberDefendersObjective: Analyze a disk image to investigate multiple forensic cases by examining registry, event logs, and email artifacts using…