A technical blog on Active Directory structure and automation via Active Directory module

Offsec AD (Part 4) : AD Structure & Automation via Active Direcory Module

A technical blog on how to setup Kali VM and configure network

Offsec AD (Part 3) : Setting up Kali VM & Resolving Network

A technical blog on how to create and link users and computers to the DC

Offsec AD (Part 2) : Linking Domain Users and Domain Computers

A technical blog on how to setup Domain Controller for an offensive AD lab

Offsec AD (Part 1) : Setting Up Domain Controller

A technical gist of my first red team engagement

How I hacked an Enterprise

CVE-2026-41096: Heap Overflow in the Windows DNS Client

A walkthrough on Classic Phantom DLL Hijacking

Phantom DLL Hijacking

Simple recipe to cook your first offensive DLL

Creating your first Offensive DLL

A detailed blog on how to craft dynamic shellcodes from process memory

Windows x64 - Dynamic Shellcoding (calc.exe)

Windows x64 - PEB, TEB and EAT

A detailed blog on PE structure and it's internals

Windows x64 - PE Structure

A detailed blog on how to create a static MessageBox shellcode for Windows x64 environment

Windows x64 - Message Box Shellcode (Static)

A detailed blog on how to create a static shellcode for Windows x64 environment

Windows x64 - Shellcoding (Static)

A technical blog on performing LLMNR poisoning and NTLMv2 credential grabbing

Offsec AD (Part 6) : LLMNR Poisoning & NTLMv2 Hash Grabbing

A technical blog on NTLM authentication flow and its network packet analysis in depth

Offsec AD (Part 5) : NTLM Authentication & Network Analysis

A detailed blog about AMSI internals and patching AMSI through memory

AMSI Bypass - Memory Patching

A simple walkthrough on  Vulnserver KSTET using socket reusing and staged exploitation technique

Vulnserver KSTET - Staged exploitation and Socket reusing

A simple walkthrough on  Vulnserver GTER using socket reusing and staged exploitation technique

Vulnserver GTER - Staged exploitation and Socket reusing

A simple walkthrough on  Vulnserver GTER using egg hunter and staged exploitation technique

Vulnserver GTER - Staged exploitation and Egg hunting

A simple walkthrough on  Vulnserver LTER using encoders to bypass restricted characters

Vulnserver LTER - Bypass Restricted Characters

A simple walkthrough on  Vulnserver HTER vanilla EIP overwrite

Vulnserver HTER - EIP Overwrite with Character conversion

A simple walkthrough on  Vulnserver GMON SEH overflow with stack pivoting

Vulnserver GMON - SEH Overflow & Stack Pivoting

A simple walkthrough on  Vulnserver GMON SEH overflow & Egg hunting

Vulnserver GMON - SEH Overflow & Egg Hunting

A simple walkthrough on  Vulnserver TRUN stack buffer overflow

Vulnserver TRUN - Stack Buffer Overflow

A simple guide to set up Vulnserver and insight about user land memory

Blog

// Research index

Offsec AD (Part 4) : AD Structure & Automation via Active Direcory Module

Offsec AD (Part 3) : Setting up Kali VM & Resolving Network

Offsec AD (Part 2) : Linking Domain Users and Domain Computers

Offsec AD (Part 1) : Setting Up Domain Controller

How I hacked an Enterprise

Research index