Character encoding is fun

By bigfella in RE/ASM/LL on

Historically - computers stored, transmitted and processed numeric values only. Once the need for working with text presented itself, a new challenge appeared.…

Slow is fast

By bigfella in general on

People have stopped caring about a good read, attention span gets shorter with each reel getting faster, shortcuts are being taken, superficial goals are being set and we are not looking into ourselves as much as we should!…

Internal medicine / Information security

By bigfella in general on

I've been frequently asked - what is it exactly, that an information security professional does, so I made this, imho, interesting analogy between internal medicine and information security - to try and demystify it.…

Hijacking execution flow; dll side-loading

By bigfella in Offensive on

Most windows executables import at least some DLL's (Dynamic Link Libraries). It so happens that even some Microsofts signed executables tries loading some dlls, which are no longer required for ones proper functioning nor the dll itself is present on the system.. We can then abuse this behaviour…

Minimalistic https c2 beacon poc - using c/libcurl

By bigfella in Offensive on

Having some fun with c recently and also playing with c2 concepts, decided to make a poc c2 beacon using c and libcurl. libcurl honestly because i didn't want to deal with winhttp/sockets, and because it is already present inside every windows host (even though mine exec…