Internal medicine / Information security

Internal Medicine is a broad medical specialty dedicated to the prevention, diagnosis, and treatment of diseases. Often referred to as the "queen of medicine," it offers a holistic approach by integrating a comprehensive understanding of the body's internal systems, ensuring that all aspects of a patient&…

Hijacking execution flow; dll side-loading

Most windows executables import at least some DLL's (Dynamic Link Libraries). It so happens that even some Microsofts signed executables tries loading some dlls, which are no longer required for ones proper functioning nor the dll itself is present on the system.. We can then abuse this behaviour…

Minimalistic https c2 beacon poc - using c/libcurl

Having some fun with c recently and also playing with c2 concepts, decided to make a poc c2 beacon using c and libcurl. libcurl honestly because i didn't want to deal with winhttp/sockets, and because it is already present inside every windows host (even though mine exec…

Exporting splunk dashboard with custom tokens

In previous splunk post, we've went through logic that allows us to export dashboards and store them on remote storage server. But there was a catch, that api endpoint, that we've used for generating pdf out of choosen dashboard, does not provide us with a way…

Qualys trend - in retrospective

Qualys is an awesome product, but have you tried fetching "old" vulnerability data for reporting purposes? Not possible, the way that solution scaled, and new modules built up around its core, the way "firstFound, lastFound" and some other params constantly change, its just not possible to…

Splunk dashboard - scheduled export and storage solution

Hi, its been quite some time from last blog. I've decided to help you in addressing a potential need of having scheduled splunk dashboard exports as well as storing them on a remote storage - mounted via CIFS. What do I mean by this? Say you have a…

Linux lost and found, pt.1

I f*-ed up my kernel drivers. I want to dedicate this part of linux lost and found to most recent screw up that happened - I f*ed up my kernel. What happened? I am on my Fedora 41 - 6.12.4-200.fc41.x86_64, day is sunny,…