Emulating Kimsuky's Initial Access

When choosing an initial access technique, I am a big fan of LNKs. Studying CTI reports, I noticed the constant recurrence of LNKs as an initial access vector across multiple APTs, including APT28,

RedSun Exploit (CVE-2026-41091)

github.com GitHub - tc4dy/CVE-2026-41091-PoC-Exploit: 🔥 CVE-2026-41091 SolarFlare | Microsoft Defender... 🔥 CVE-2026-41091 SolarFlare | Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM via Cloud Files

Hacking C++ (Part 2)

Bypassing CFI What CFI Is Control Flow Integrity (CFI) is a security mitigation that protects against control-flow hijacking attacks by checking if function call is valid. Every compiler has its own implementation

Hacking C++ (Part 1)

Introduction Every high-level language has built-in mechanisms designed to make life easier for programmers. Like any other programming language, C++ provides a wealth of ready-made solutions. Programmers usually don’t

Linker Scripts and Embedded Systems

I realized that every time I talk about linker scripts, I say that most programmers won’t ever see one unless they work with embedded systems, but I never go deeper than this.