corpus.blog
41554 blogs · [ { "id": "01a0d4ef-a4d7-711f-bdf3-f2f61600aeaf", "title": "Turning WerEnc.dll LOLBIN into an attacker-controlled encryption primitive (BYOK)", "url": "https://0xsp.com/research/turning-werenc-dll-lolbin-into-an-attacker-controlled-encryption-primitive-byok/?utm_source=rss&utm_medium=rss&utm_campaign=turning-werenc-dll-lolbin-into-an-attacker-controlled-encryption-primitive-byok", "published_at": "2026-09-15T17:53:25+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8dc5f9f7c", "title": "Game of Hide and Seek: Detecting Dynamic API Resolution at Runtime With Aether", "url": "https://0xsp.com/research/game-of-hide-and-seek-detecting-dynamic-api-resolution-at-runtime-with-aether/?utm_source=rss&utm_medium=rss&utm_campaign=game-of-hide-and-seek-detecting-dynamic-api-resolution-at-runtime-with-aether", "published_at": "2026-06-24T14:23:13+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8dd5db97e", "title": "Aether: memory forensics and threat hunting tool", "url": "https://0xsp.com/security%20research%20%20development%20srd/aether-memory-forensics-and-threat-hunting-tool/?utm_source=rss&utm_medium=rss&utm_campaign=aether-memory-forensics-and-threat-hunting-tool", "published_at": "2026-06-02T11:39:43+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8dd806c69", "title": "Implementing Hell’s Gate in Zig – Part 1", "url": "https://0xsp.com/security%20research%20%20development%20srd/malware%20research/implementing-hells-gate-in-zig-part-1/?utm_source=rss&utm_medium=rss&utm_campaign=implementing-hells-gate-in-zig-part-1", "published_at": "2025-09-18T13:13:37+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8dde838d2", "title": "The Hidden Risk: Compromising Notepad Cowriter’s Bearer Tokens", "url": "https://0xsp.com/offensive/the-hidden-risk-compromising-notepad-cowriters-bearer-tokens/?utm_source=rss&utm_medium=rss&utm_campaign=the-hidden-risk-compromising-notepad-cowriters-bearer-tokens", "published_at": "2025-04-20T16:37:17+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8de0d9131", "title": "How I Leveraged WMI to Enumerate a Process Modules and Their Base Addresses", "url": "https://0xsp.com/uncategorized/how-i-leveraged-wmi-to-enumerate-a-process-modules-and-their-base-addresses/?utm_source=rss&utm_medium=rss&utm_campaign=how-i-leveraged-wmi-to-enumerate-a-process-modules-and-their-base-addresses", "published_at": "2024-04-15T17:48:48+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8dea1f33d", "title": "Navigating Embedded Payload Extraction from RDP Files – Defence evasion", "url": "https://0xsp.com/offensive/navigating-embedded-payload-extraction-from-rdp-files-defence-evasion/?utm_source=rss&utm_medium=rss&utm_campaign=navigating-embedded-payload-extraction-from-rdp-files-defence-evasion", "published_at": "2023-08-13T21:41:26+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8df53ef42", "title": "Backdoor discovered in PLDT home fiber routers", "url": "https://0xsp.com/security%20research%20%20development%20srd/backdoor-discovered-in-pldt-home-fiber-routers/?utm_source=rss&utm_medium=rss&utm_campaign=backdoor-discovered-in-pldt-home-fiber-routers", "published_at": "2022-12-04T16:52:05+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8df641c0c", "title": "Building mini c2c in Pascal – part 3", "url": "https://0xsp.com/security%20research%20%20development%20srd/building-mini-c2c-in-pascal-part-3/?utm_source=rss&utm_medium=rss&utm_campaign=building-mini-c2c-in-pascal-part-3", "published_at": "2022-08-20T15:13:21+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8e019b698", "title": "Building mini c2c in Pascal – Part 2", "url": "https://0xsp.com/security%20research%20%20development%20srd/building-mini-c2c-in-pascal-part-2/?utm_source=rss&utm_medium=rss&utm_campaign=building-mini-c2c-in-pascal-part-2", "published_at": "2022-08-11T12:35:56+00:00" }, { "id": "01a0871d-18ea-73c2-8a9e-baa8e01d614d", "title": "Building mini c2c in Pascal – Part 1", "url": "https://0xsp.com/security%20research%20%20development%20srd/building-mini-c2c-in-pascal-part-1/?utm_source=rss&utm_medium=rss&utm_campaign=building-mini-c2c-in-pascal-part-1", "published_at": "2022-07-31T10:02:37+00:00" } ] posts Claim your blog
Back to 0xsp.com
Blog · corpus.blog/blogs/0xsp.com/posts

0xsp.com

0xsp.com

2026

Turning WerEnc.dll LOLBIN into an attacker-controlled encryption primitive (BYOK)original ↗
15 Sept 2026
Game of Hide and Seek: Detecting Dynamic API Resolution at Runtime With Aetheroriginal ↗
24 Jun 2026
Aether: memory forensics and threat hunting tooloriginal ↗
2 Jun 2026

2025

Implementing Hell’s Gate in Zig – Part 1original ↗
18 Sept 2025
The Hidden Risk: Compromising Notepad Cowriter’s Bearer Tokensoriginal ↗
20 Apr 2025

2024

How I Leveraged WMI to Enumerate a Process Modules and Their Base Addressesoriginal ↗
15 Apr 2024

2023

Navigating Embedded Payload Extraction from RDP Files – Defence evasionoriginal ↗
13 Aug 2023

2022

Backdoor discovered in PLDT home fiber routersoriginal ↗
4 Dec 2022
Building mini c2c in Pascal – part 3original ↗
20 Aug 2022
Building mini c2c in Pascal – Part 2original ↗
11 Aug 2022
Building mini c2c in Pascal – Part 1original ↗
31 Jul 2022