Overview BELoader is a Go reimplementation of stomp, rewritten as a standalone Windows executable with zero runtime dependencies. Where stomp required Python and a deployment archive, BELoader co...

Last night I gave my first public talk at Beerump — a friendly rump session format where everyone gets a approximately 10 minutes to present a cybersecurity-based topic. A great first experience sp...

Browser extensions are an underestimated attack surface. They run natively in the browser, are trusted by design, have access to cookies, network requests, and every page the user visits - and most...

Browser extensions are a massively underestimated attack surface. They run natively in the browser, have access to cookies, network requests, and every page the user visits, and most EDRs don’t eve...

Originally published on Medium. Hello cybersecurity enthusiasts, some weeks ago, during a reverse engineering stuff, I heard about ghidra-mcp. Instead of ignoring this tool, my curiosity was trig...

Originally published on Medium. Hi everyone, it’s been a while. Recently, I worked on an ESP32 project which aimed to perform packet injection attacks in IEEE 802.11 communication. Instead of spe...

Originally published on Medium. What is the PATH variable ? As you may already know, the PATH variable contains a directory’s list separated by : (Linux/maxOs) or ; (Windows). You can check its ...

Originally published on Medium. Hello defenders and red-teamers, let’s lift the veil on process injection. In this article, I showcase a basic example of process injection on Windows. I provide ...