Blog Posts

Exploiting log4j | Apache Solr

Log4j is a popular Java library maintained by the Apache foundation used as a logging framework for Java. Around Friday 10th December...

Manually unpacking a UPX packed binary

Manually unpacking a binary that was packed with UPX, using two different methods including finding a tailjump and the pushad instruction.

Ransomware investigation using Splunk - BlackSun

In this write up, we will be assuming the role of a SOC analyst investigating a ransomware incident using Splunk. The task is to...

IcedID malware analysis

Malware analysis of an IcedID dropper contacting hxxps[://]hardenpasedaken[.]com C&C server.

Silly Putty Malware Analysis

After completing the PMAT course, something set into motion. My new found passion for Malware Analysis. This will be the second time I...

Python bank card stealer

Over the past couple of months I have dived deep into malware analysis and reverse engineering. Completing the PMAT course and enrolling...

McAfee quarantine files - Automating BUP file analysis.

Quarantine (.BUP) files, otherwise known as BackUp files, are created by various applications such as McAfee antivirus. McAfee will...

Malicious office macro analysis

In this blog post, we will creating a malicious macro that allows us to catch a reverse shell when a word document is opened. We will...