root@blindsec:~$ whoami
k4z0 — offensive security research
root@blindsec:~$ cat ./focus
red teaming · AV/EDR evasion · exploit development · source code review
root@blindsec:~$ ls -1 ./
posts/ technique writeups and research
writeups/ exploit dev, CTF and code review
Recent
Using Microsoft Azure App Services to Evade Network Filtering and Establish a C2 channel
·987 words·5 mins
Turning an Azure App Service into a reverse proxy and payload host to punch a C2 channel through egress filtering.
Hash Relaying: The path to Domain Admin
·1515 words·8 mins
Four NTLM relay scenarios from a real engagement, chaining SMB share access up to SYSTEM execution and Domain Admin.
Use DInvoke & Process Hollowing to bypass AV and Firewall
·870 words·5 mins
Combining DInvoke with process hollowing to defeat both the AV and the interactive firewall of Avira Internet Security.
Bypass (Interactive) Firewalls using DLL Injection
·1496 words·8 mins
Injecting into an already-trusted process so the interactive firewall never raises a prompt.
Process Hollowing [Explained]
·1113 words·6 mins
A step-by-step walkthrough of how process hollowing actually works.
DInvoke, two-stage payload and RC4 in Meterpreter
·1194 words·6 mins
A Python staging server plus a C# DInvoke dropper that pulls an RC4-encrypted second stage and lands an undetected session.