Security Blog

Load and Inject Malicious DLL Using Microsoft Tools

Introduction Dynamic Link Library (DLL) injection is a technique used by attackers to execute malicious code within the address space of another process. What makes this technique particularly...

BadRabbit Ransomware Analysis

Overview BadRabbit emerged on October 24, 2017, primarily targeting organizations in Russia, Ukraine, Turkey, and Germany. Unlike NotPetya's supply chain attack, BadRabbit relied on drive-by download...

PowerShell: Malwares Can Use It Without PowerShell.exe

Overview PowerShell is one of the most powerful tools available on Windows systems. Unfortunately, it has also become one of the most popular tools for attackers. While many security solutions...

NotPetya Ransomware Analysis

Executive Summary On June 27, 2017, what initially appeared to be a variant of the Petya ransomware began spreading rapidly across networks worldwide. Dubbed "NotPetya" by researchers, this malware...

Directory Brute Forcing Using Curl and WC

Directory Brute Forcing with common tools: Finding non-linked resources is an important part of any assessment. If you’re working with a scope that limits tools you can install/use, or you want...

Checking For Ssl Vulnerabilities On The Command Line

While Nessus is a wonderful vulnerability scanner, sometimes it is too slow and resource heavy for individual issues. The following 2 equivalent scripts perform checks for the following SSL related...

String Encoding in the Shell for Obfuscation

Data encoding in the shell is a quick and reliable method to parse input in one type of format to format of another type. This could be done in order to determine how an application has converted...

Jul 06, 2026 6 min read

Bash Web Requester

Bash Web RequesterScan URLs for a list of given regexps #!/usr/bin/env bash ################################################################ # Bash Web Requester # by Aung Khant,...

Bash Web Parameter Fuzzer

PenTester Scripting [[exploitation:bash_web_parameter_fuzzer]] You are here: start » exploitation...

SSL Tests - v2, weak ciphers, MD5, Renegotiation

SSL Tests - v2, weak ciphers, MD5, Renegotiation #!/usr/bin/env bash # Description: # Script to extract the most security relevant details from a # target SSL/TLS implementation by...