A comprehensive guide to shellcode development in C/C++ — from understanding what shellcode is, through basic execution techniques, to advanced EDR/AV bypass methods including direct syscalls, indirect syscalls, sleep obfuscation, and process injection. Covers Windows 10 and 11 protections up to 2026.
The most comprehensive guide to AD CS (Active Directory Certificate Services) attacks covering all 11 ESC techniques with step-by-step exploitation, enumeration, tools, commands, expected outputs, and remediation.
A deep-dive into Active Directory Certificate Services ESC9 and ESC10 privilege escalation techniques — theory, enumeration, exploitation, detection, and remediation.
The most comprehensive Windows LPE guide ever written — covering 100+ techniques from kernel exploits, token abuse, the entire Potato family, UAC bypasses, DLL hijacking, service misconfigs, COM hijacking, credential hunting, and every major CVE up to 2026.
A comprehensive offensive guide to JSON Web Token vulnerabilities, exploitation techniques, real-world CVEs, and automation tools.
A comprehensive guide to understanding, exploiting, and mitigating broken authentication vulnerabilities in modern web applications.
A comprehensive guide to understanding, exploiting, and mitigating insecure file upload vulnerabilities in modern web applications.
A comprehensive guide to understanding, exploiting, and mitigating insecure file upload vulnerabilities in modern web applications.
A quick guide to the absolute essential command-line shortcuts to speed up your daily workflow.
A comprehensive deep-dive into Windows kernel driver development, vulnerability classes, privilege escalation via token stealing, BYOVD attacks, and EDR callback neutralization — written for security researchers studying kernel exploitation.