88 88
88 88
88 88
8b d8 8b, ,d8 88 88 8b,dPPYba, ,adPPYb,88 ,adPPYba, 8b,dPPYba, ,adPPYb,d8 8b,dPPYba, ,adPPYba, 88 88 8b,dPPYba, ,adPPYb,88
`8b d8' `Y8, ,8P' aaaaaaaa 88 88 88P' `"8a a8" `Y88 a8P_____88 88P' "Y8 a8" `Y88 88P' "Y8 a8" "8a 88 88 88P' `"8a a8" `Y88
`8b d8' )888( """""""" 88 88 88 88 8b 88 8PP""""""" 88 8b 88 88 8b d8 88 88 88 88 8b 88
`8b,d8' ,d8" "8b, "8a, ,a88 88 88 "8a, ,d88 "8b, ,aa 88 "8a, ,d88 88 "8a, ,a8" "8a, ,a88 88 88 "8a, ,d88
"8" 8P' `Y8 `"YbbdP'Y8 88 88 `"8bbdP"Y8 `"Ybbd8"' 88 `"YbbdP"Y8 88 `"YbbdP"' `"YbbdP'Y8 88 88 `"8bbdP"Y8
aa, ,88
"Y8bbdP"
..........................'''''''''',,,,,,,,,;;;;;;;;;;;;;;::::::::::::cccccccccccccccccccllcclcccclllllccccccccccccccccccccccccccccccccccccccccccccccccccc:cccc:::::c:::::;;;;;;;;;;;;;,,,,,,,,,,,,''''
......................'..'''...''''',,,,,,,;;;;;;;;;;;;;;;;:::::::::::ccccccccccccccccllccccccllllllllllcccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc::::::;;;;;;;;;;;;;,,,,,,,,,,,''
......................''''''''''''',,,;,,;;;;;;;;:::::;;;::::::::::::cccccccccccccccccclcccllllllllllllllcccccllcccccccclclllllccccccccccllcclccccccccccccccccccccccccccc:::::::::::;;;;;;;;;;;,,,,,,,,'
........................'''''''''',,,,;;;;;;;;;;;::::::::::::::::::::ccccccccccclllllcclllllclllllllllllllllllllcccccclllllllllllcccccllcllcclcccccccccccccccccccccccccccccc:::::::::;;;;;;;;;;,,,,,,,,'
.........................''''''''',,,;;;;;;;;;;;::::;::::::c:::::::cccllcccllllllcclllllcllllllllllllllllllllllllllllllllllllllccccccccllllllllllcccccccccccccccccccccccccccc::::::::;;;;;;;;;;;;;,,,,,,
......................''''''''''',,,;;;;;;;;::::::::::::::cccc:ccccccccclccllllllllllllllcllllllllllllollllllllllllllllllllllllccccccclllllllllllllcccccccccclcccccccccccccccc::::::::::::;;;;;;;;;;,,,,
....................'''''''''',,,,,,;;;;;;;:;;:::::::::::cccccccccccccclccclllllllllllllllllcllllllloollllllllllllllllllllllllllllllllllllllllllllllllllllcclllccclllcclllcccccc::::::::::::;;;;;;;;;;,,
...................''''''''',,,,,,,;;;;;;;;;;;:::::::c:::::ccccccccccclllllllllllllllllllllllllllllllllllllllllllllollllllllllllllllllllllllllllllclllllccccllllccclllllcccllcccc::::::::::::::::;;;;;;;
................'''''''''''''',,,,;;;;;;;;;;;::::::ccc:::::cccccclccclllllllllllllllllllllllllllllllllllllllllllllllllllllollloolllllllllllllllllllllllllccclllllcclllllccccccccccccc::::::::::::;;;;;;;
..............'''''''''''''''',,,,;;;;;:;:::::::::::::::::ccccccclcccllcllllllllllllllllloollllllllllllooooolllllooloollllllllollllllooolllllllllllllllllllllllllcclccccccllcccccccccccc:::::::::::;;;;;
.............'''''''',,,,'',,,,,,,;;;;:::::::::::::::::::cccccccclllcccclllllllllllllllllllllllllloooooooooollllloooooolllllloooolllllooooollllllllllllllllllllllcclcccccccccccccccccccccc::::::::::;;;;
............'''''',,,,,,'',,,,,,,;;;;;;::::::::::::::::::::ccccccclllclllllllllllllloolllllllll::;;;,,,,,,,,,,;;;;:::::ccccllloooollllllloolllllllllllllllllllllllllllllcccccclccccccccccc::::::::::::;;
............''''',,,,,,,,,,,,,,,,;;;;;;;:::::::::::::::cccccccccccllllllllllllllllllllllllllc;'..........................'',,;;::cccllllloollllllllllllllllllllllllllllllccclllcccccccccccccc::::::::::;
............'''''',,,,,,,,,;;,,,;;;;;;;;::::::::::::::::::cccccccccclllllllllllllllllllllllc'. ...................''',;;;;;;:cccllllcccclllllllllllllllollllllllcccclllllccccccccccccccccc::::::
.............'''''',,,,,,,,,,,,,;;;;;;::::;;;;:::::::::ccccccccccccccccccccllllllllllllllll; .........','',;;::ccllcccccllllllllllllllloollllllcllcccllllllcccccccccc:ccccc:::::
...........''''''''''',,,,,,,,,,;;;;;;:::;;;;;;::::::::::ccccccccccccccccclllllllllllllllll:. . ..........................',,;:cloddddoolllllllllooollllllclllccllllllllccccccccccccc::::::
...........''''''''''''',,,,,,,,,,;;;;;;;;;;;;:::::::::::cccccccccccccccccclllllllllllllllll:. ........................',,,,;;,'.....',;clodxxdddooolllllllllllllcllcllllllllccccccccccccc::::::
...........''''..'''',,,'',,,,,,,,;;;;;;;;;;;;:::::::::::::cccc::::ccccccccllclllccccclllllll:. .....................',,,,,;;::ccccccc:;,''''',;:cclloddooollc::clccllllllllllllcccccccccccc::::::
..........'.......''',,,,,,,,,,,,,,,;;;;;;;;;;;;;;:::::::;:::::::::cccccccccccclllcccccclllllc' ......................'',;;;;;:cccllllloooolc:;;;,,,''',;:looddl;;:::cclllccccllllccccccc:cccc:::::
.........''.....'''''',,,,,,,,,,,,,,,,,;;;;;;;;;;;;;;;::;;::::::::::::cccccccccclcccccccclllll;. ......................''',,;:::ccccllooooooodddoolcc::;;,'.',:odl:;;;;;::ccccllccllcccclcccccccc::::
..........'........'''',,,''''',,,,,,,,,;;,;;;;;;;;;;;;::;:::;::::::::::c:ccccccccccccccccllcl:. .................''''',,;;::clllllooodddddddddddollccccc:;'',::,'.'''',;;;:clllcllcccccllccccccc:::
...................'''''''''''''''''',,',,,,,,,,,,,,;;;;;;;;;;;;;::::::::::cccccccccccccccllccc. ................'',,,;;;::cloloddddxxxkkkkkxxddoollccclll:;,,'........''',;:cllllcccccccccccccc:::
.....................'''''''''''''''''''''',,,,,,,,,,,;;,,;;;;;;;;::::::::ccccccccccccccccccclc. ................''',,;;::cclloodxxkkkkOOOOkkkxddooolclllll:;'.............'';clllllcccccccccccc:::
.............'''......''.............''''''''',,,,,,,,,,,,,,,,;;;;;;;;;;::::cccccccccccccccccc:. ......'',,''''''''',,,;::ccllooddxxkkOOOkkkkkxxxddoooooodo:,.................;llllllccccccccccc:::
,:;'''....':looooolc;;,'...............'''''.'''''''''',,,,,,,,,;;;;;;;;;::::c::::::cccccccccc,. ......''''''''...'',,;;:ccloodddxxkkkkkkkkkkxxxxxxxxxxxxdl,'................':llcllllcclcllccccccc
col,,:'. ;dkdl:cdxdodkxlclc;,'..................''''''''''''',',,,,,,,;;;;;:::::::::::::cccc:'.. .........'..''...'''',,;:clldxkkkkO000000OOOkkxxxxxxxxkkkd:'.........'.....';clllllllllllllllcccccc
ldd:.;:.. :xocodxkkodkxdkKK0Ol.............................''.........''''',,,,;;;;;;;::::::;........................'''',;;:clodxOOOO00KKKXXKKKKK0Okkxxxxxkxl,...........'..',:llllllllolllllllccccccc
;ldl.':,. ;dlcdxdodllkOko:;;;'............................... ..........''''........................''',,;:clodxkOOOO0KKXXXXXXXXXXXK00Oxdooo:,'''..'.....'',:cllllllllloolllcllccccccc
.,llc,',..;ooclddllo;.','..................................... .........''''''''......'.''',,;cldxkO0000KKXXXXNNXXXXXXKK0kdoollc:,'.''.....',:lllllllllllllllccclccccccc
.:lo:.::,clcoxl;'............................................. .......''',,,,,'''',,;:cloodxkO0KKXXXXXXXKKKK0xoooollo:..''..'.',cloollllllllloollccccccccccc
.;llc',cc:ldc;'................................................... ......'',,;;;::;;;:ccloodxkO0000K0Oxddooclo:.....'..,cllooollllollllolllcclccccccc
' .:loc.,oc;,.......................................................... .....',,;:::cc::::ccclodooooolldl'....''',:llllloolllllllloollllcccccccc
;..cdo:.':'................................................................. ....',;:cccc:::;;;,;ll,....'',,;clllolllllllllllooolcccccccccc
' .:dkd,.c:........................................................................ ...,;;:cccc::,'''.'',,:lllollllllllllllloollcclcccccc
;..,oxxl,;:.............................................................................. ........... ...',,;;;;;;;:cllllllllllllllllllllllcclccccc
;'..;col;'.............................................................................. .....',,,,,''''.... ...',;:coooolllllllllllllloolcccccccc
....,coc'.............................................................................. ..... .........';:clllccccc,'c:. ...';;:cllllllllllcllllccccccc
....,coo;............................................................................. .... ..:;',;clllooddxxdc;:;;. .... ...';:clllcclllccccccc
....':odc......................................... ...................................''.. .... .;olokkkxdxxkkkOd:ldc,. .. ......... ...,;:cllllccccc
.....,cdd;........................................ .............................':::;'',,'.. ... 'dxdOkkkkOOOOOOOdlc;...'...''...... ... .. ..,;cccccc
......:ldl'... . ............................... .. ........................';;lxxd::cooc'. .'. .,odoxkkO000000K0Oxc...,'..,,''''........ ...... ..,:cc
......,cod:. . ... ............................ ....................':ccc;;:lxxxxkOkd;. ... .,cllxk0KKKKKKKKKOd'..,;. ';;,,,,,...''. ..''...... ,cc
.......;ldo'.. ... .................. ...... .................';;cdxxocloddoodddxdl'. .... ..';;:cdk0KKKKKKKK0x,..;;,..,:;;;,,'.',,,...',,'.....'''....... ..':cc
.. ..,codc. . ... . ...... ............;cllc;,;looooooollccccccc:'. .............'',;coxO00KKKKXKk,..;;;' .;;;;;,'..,;;...',;;,'''.,lollollccc::;;;,,,'''',,,,,,,,,;:ccc:c
. .';ldo,. .. . . ... ........';:::lddollllcccccccc:::;;;;;;;'.. ............';codxkO0KKKKk;..,;;;..';;;;;,..,;;'..',;;;,,'',clllllolllllllllclcccccclllllcccccccccc
..,coxc. .. ....... .... ........ .....,colc,';cllcccc:::::::cc:::;,,'''',,'..............';:cldxkO00KKk;..,,;:;..,;;,,,..,,;,'.'',;;,,,,,cllllllllllllllllllcccccccllcccccccccccc
..;ldo,. .......... . ....,;;;:lolcclocc:::;;;;:::::::::;;;,,'''',,;;;;,,,,,;,,;:cllodxkkO0KO;..,,',;,',;;,,,..,,;;,''',,;,,,,;:llllllllolllllllclllcccccccccccccccccccc
..,codl. ...... ...,;::;,,;cllc::::;;;;;;;;::::::::::::;;;;,,,,,;;;;;;;;::cccllodddxkO00O:..,;,.',,,;;,,,'.,,,,,,,,,,,;,,,,:lllllcllllllollllclcccccccccccccccccccccc
..;ldd;. .... ...',;;;:cccloolc:;;;,,,,,,;;;;;::::::::::::;;;;;;,,,,,,,;;::cccoodxxxxO00Oc..';;'..',;,,,,..',,,,,,,,,,,,,,,;clllllllllllllllllllcccccccccccccccccccccc
.':oxl. . . ... . ..,::;,',;::::::;;,,,'',,,,,;;;:::::::::cc::::::::;;;;;,,,;;;;;;:ccodxxxkO00l..';;,'..',,,','..,,,'''''''...,,,:llccllllllllloooolllcccccccc:ccc:ccc::cccc
.,cdx:. .. ..',,,;::::::;;,,,,'''''',,;;;:::cc;,;ccccc;,;cc:cc;;::::::ccc:::::cldxxkkO0K0o..';;,'..'',,'''..'','..'''......';clllllllllllllooooolllllccccc:cccccc:::::::
.':lxo. . ....''',;;;;,,,,''',;;;;;;::;;:;:ccc:,';:ccc:,',:ccc:,';clllol::cldxkOkk00KKKKOc..',,;,'..'','''..',,''','.. .....;cllllllllllllllloollllcccccc::cccc::::::::
..,cdd:. ...'''...','''',,,;;;::::c::c::;;:::ccllllllooooooooddoooolccccc::cclxOKxlk00KKOo,..',,,,''..'''''..',,'',,'. .....:lllllllllllllllllllllcccccc::ccccc:::::::
.':oxo' .',''''..'',,;:c::cccccc;,::;cc:::::::::;,,,,,,,,,,;:cllooodxxxxxxxddddddoclx0KKo..',,,,,,,'...''...'''',,,'..... ...:llcclclllllclllllllllccc:ccc:::::::::::::
..,cdxc. . ....'..',,;:llol;;ll:::;;,,,,'''..... ......',,;;:clloolcc:::;;...'...''''........''',,,,'''....... ...;clccclllllllccclcccccccccccccc::::::::::::
..;lxo' ......',:c;,:::ccc:;,,''...... ..... .......... ............ ..................'',,,''',,,'''.......;llllllllllccccccclcclcccccccc:cc:::::;;::::
.,codc. ......',;clc,,::;,,'..... ......................... ..........'..''....',,''''''''':lllllcccclllcclllllclllccccc::::::::::::::::
..;ldd, ........',,:;;,'........ ................................ ........',,''',,,,,,,,;;,,,;::ccllcccllolllllllccclllcccc::::::::::::::;
.,codc. ..'.......''''..... ........................................ .. ... .......'''',,,,,,,,;;;;;;;;:::ccllllllllllllcccllllcccc::ccc:::::::::
..;lod; .'',,............ ................................'',,'. .. . .................''',,,;;:cclccllcccllllllllllccc::::::cc:::;;::
.':ldl. .';'','........ .... .........................'''',,,'... .... ... ...... . ..........',;:ccllcccccccllcllcccc:::::::::::::::
..;cdd;. ..';,..... ........................'''''',,,,,,,' ................. .......',:ccccccccccccccccc:::::::::::::;;;
.':ldl. ..... ....................'''''''''',,,,,,,,. .. ... .....................................',;ccccccccccccccc::::::::::::;;;;
..;cod:. ...................''''''',,,,,,'''.. ... ..........'....',,''''.'''''...........,;ccccc:::cccc:::::::;;;;;;;;;;
.':ldo' . ....................''........ . ......... ..............';;,,,,',,,,,,,,,''''''''';:ccc:::::cc::::::;;;;;;;;;;;
.;codc. ....................... .. ........................',,,,'.........'......''''''';::::::::::::::::;;;;;;;;;;;
.';cdo' ............... ... .....................''...................''''''...',,;:::::::::::;;;;;;;;;;;
.':ldc. ..... .. ........''''''''''''''''',,,,,,,'''''''''..'''''.''',,;;:::::;;;;;;;;;;;;
..;coo' .... ... ............'''''''''''''''',,,,''''''''''.'''''',,;;:;;;;;;;;;;;,
.':loc. . ..'. ... ................'',,,,,,,'''''''''''''''''.''',,,;;;;;;;;;,
..,clo, ............ .''..... ....... ...........................'',,,,,,,,,,,,''''''''''''''''''''''',,,,;;;,,,
.';coc. ................ ..'.. .....................'..........''''..'''''',,,,,,,,,,,,''''''''''',,,'''''''''''''''',,,,,,
..':ll,. ................ ...,'. .................'''''''''''''''''''''',,,,,,,,,,,,''''''''''',,,,,,,,,''''''''''''''''''
..,clc. ......................... ..............'''''''''',,,',,,,,,,,,,;;;;;,,,,'''''..''',,,,,,,,,,,,,,,''''''''''''''
.';cl,. ..................... .. ................'''''''',,,,,,,,,,,,,,,,,,,,,''''...',,,;;,,,,,,,,,,,,,,,,,,'''''''''
..':lc. ........................ ..................''''',,,,,,,,,,,,,,,,,,,'''....',,;;,,,,,,,;;,,,,,,,,,,,,,,,''''''
..;cl;. .......................... ................'''',,,,,,,,,,,,,,,,,''.....'',;;,,,,''',,,,,,,,,,,,,,,,,,,,'''''
.';lc. .......................... .. ................'''',,,,,,,,,,,,,,,'''....',,,,,,,,'''''',,,,,,,,,,,,,,,,,,,,,''.
..,cl;. ............................ .. ................'',,,,,,,,,,,,,,,,''......',,;;,,''''..''''',,,,,,,,,,,,,,,,,,'''.
.';cc. ............................. ........ ...........''',,,,,,,,,,,,,,,'......'',,,,,,''''....''''',''',''',,,'',,,'''..
.,:c;. ................................. ........ ............'''''''''''',''''.....''',,,,,,,''......'''''''''''''','''''''''..
..;cc' ........................................... ............''''''''','',,''....''',,,,,,,,''.......'''''''''''''''''''''.....
.';c;. .................................................. .......'''''',''''''....'',,,,,,,,,''.........'..''''''''.'''''''......
..,::' ................................................... .........''''''''''.....'',,,,,,,,''..................'''...''''.......
.';:;. ..............................................................'''''''''....'',,,,,,,,''..........................''........
..';:' .......................................... ....................''''''''''''',,,,,,,,,'.....................................
..,:;. ...............................................................''',,'''''',,,,,,,,,,''.................................. ..
..';:' .......................................... ......................''',''''''',,'''',,,''.....................................
2021-05-14 - What is NtPssCaptureVaSpaceBulk.pdf
2022-11-17 - Extracting Syscalls from a Suspended Process.pdf
2022-12-08 - EDR Evasion with Hardware Breakpoints Blindside Technique.pdf
2023-04-23 - Example of Windows Warbird EncryptionDecryption.pdf
2025-01-14 - Mapping Islamic Republic Regime in Iran-Related Online Influence Networks.zip
2025-03-25 - Inside Windows Default Browser Protection.pdf
2025-06-25 - Were going the wrong way How to abuse symlinks and get LPE in Windows.pdf
2025-07-01 - Before Vegas The Red Hackers Who Shaped China's Cyber Ecosystem.pdf
2025-08-17 - Early Exception Handling.pdf
2025-11-13 - Rehabilitating Registry Tradecraft with RegRestoreKey.pdf
2025-11-27 - From Zero to SYSTEM Building PrintSpoofer from Scratch.pdf
2025-12-21 - Callback hell abusing callbacks tail-calls and proxy frames to obfuscate the stack.pdf
2025-12-21 - GhostLocker AppLocker-Based EDR Neutralization.zip
2026-01-04 - DbgNexum Shellcode Injection.zip
2026-01-05 - IDontLikeFileLocks.zip
2026-01-07 - PatchGuard Peekaboo Hiding Processes on Systems with PatchGuard in 2026.pdf
2026-01-08 - RemoveWindowsAI.zip
2026-01-19 - Check Your Privilege The Curious Case of ETWs SecurityTrace Flag.pdf
2026-02-03 - Demonstration of Warbird Heap Execute.7z