corpus.blog
41554 blogs · [ { "id": "01a0875a-289e-723b-a762-967fd9bba676", "title": "bypassing Gatekeeper via symlinks", "url": "https://bsssq.xyz/posts/gatekeeper-symlink/", "published_at": "2026-01-12T20:14:11+00:00" }, { "id": "01a0875a-289f-73bb-be98-29445cf31a04", "title": "iota part 2 - evolution", "url": "https://bsssq.xyz/posts/iota-2/", "published_at": "2025-12-02T14:21:05+00:00" }, { "id": "01a0875a-289f-73bb-be98-29445d9bb6a3", "title": "iota part 1 - building a self-hosted CloudTrail detection engine", "url": "https://bsssq.xyz/posts/iota-1/", "published_at": "2025-11-28T20:26:19+00:00" }, { "id": "01a0875a-289f-73bb-be98-29445e00e8a5", "title": "cve-2025-43330: breaking out of a sandbox using font files", "url": "https://bsssq.xyz/posts/sandbox/", "published_at": "2025-09-16T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29445e5c7a13", "title": "reverse engineering malware in a container - part 1", "url": "https://bsssq.xyz/posts/ebpf-1/", "published_at": "2025-04-17T19:02:19+00:00" }, { "id": "01a0875a-289f-73bb-be98-29445e8d188d", "title": "clusterfuck: attack sims on k8s clusters", "url": "https://bsssq.xyz/posts/kube/", "published_at": "2025-04-09T18:37:22+00:00" }, { "id": "01a0875a-289f-73bb-be98-29445eff9147", "title": "PEB walking off the beaten path", "url": "https://bsssq.xyz/posts/memorywalker/", "published_at": "2024-12-14T00:54:19+00:00" }, { "id": "01a0875a-289f-73bb-be98-29445f9507c1", "title": "hooking functions to hide system artifacts", "url": "https://bsssq.xyz/posts/hooky/", "published_at": "2024-12-01T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29445fd31804", "title": "advanced memory protection bypasses, part 2: bypassing DEP", "url": "https://bsssq.xyz/posts/dep_bypass/", "published_at": "2024-11-23T15:06:17+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446034c8d2", "title": "advanced memory protection bypasses, part 1: bypassing ASLR", "url": "https://bsssq.xyz/posts/aslr_rop/", "published_at": "2024-11-09T20:07:15+00:00" }, { "id": "01a0875a-289f-73bb-be98-2944605d3307", "title": "exploiting driver-based vulnerabilities", "url": "https://bsssq.xyz/posts/vulnerable-drivers/", "published_at": "2024-11-06T14:38:48+00:00" }, { "id": "01a0875a-289f-73bb-be98-2944610fa7da", "title": "advanced evasions, part 2: implementing minidump structures", "url": "https://bsssq.xyz/posts/minidump-types/", "published_at": "2024-10-25T18:04:04+00:00" }, { "id": "01a0875a-289f-73bb-be98-2944618c53d2", "title": "credential access in macOS", "url": "https://bsssq.xyz/posts/macos-cred-access/", "published_at": "2024-10-08T19:50:14+00:00" }, { "id": "01a0875a-289f-73bb-be98-294461add12c", "title": "advanced evasions, part 1: PE maps + custom minidumpers", "url": "https://bsssq.xyz/posts/minidump-pe/", "published_at": "2024-10-07T17:36:59+00:00" }, { "id": "01a0875a-289f-73bb-be98-294461f52407", "title": "reading list [updated]", "url": "https://bsssq.xyz/posts/reading-list/", "published_at": "2024-10-07T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446266cdc6", "title": "sunday scaries: exploiting web apps", "url": "https://bsssq.xyz/posts/sunday-scaries/", "published_at": "2024-09-29T17:42:35+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446359d582", "title": "cosmos, part 2: domain + forest compromise", "url": "https://bsssq.xyz/posts/cosmos-2/", "published_at": "2024-09-27T16:30:34+00:00" }, { "id": "01a0875a-289f-73bb-be98-294463aaf2b0", "title": "cosmos, part 1: red-teaming corporate active directory forests", "url": "https://bsssq.xyz/posts/cosmos-1/", "published_at": "2024-09-19T14:56:20+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446459c18b", "title": "goL0: reverse engineering + malware analysis", "url": "https://bsssq.xyz/posts/gol0/", "published_at": "2024-08-26T20:29:25+00:00" }, { "id": "01a0875a-289f-73bb-be98-2944651ab7ae", "title": "goPro: detecting process hollowing with Go", "url": "https://bsssq.xyz/posts/go-pro/", "published_at": "2024-08-12T19:25:48+00:00" }, { "id": "01a0875a-289f-73bb-be98-294465fa051d", "title": "ultramax 400 [eclipse in toronto]", "url": "https://bsssq.xyz/photography/new_post13/", "published_at": "2024-04-10T14:12:23+00:00" }, { "id": "01a0875a-289f-73bb-be98-2944666971e4", "title": "ultramax 400", "url": "https://bsssq.xyz/photography/new_post12/", "published_at": "2024-03-10T14:08:13+00:00" }, { "id": "01a0875a-289f-73bb-be98-2944675cc84b", "title": "portra 800 [manitoba]", "url": "https://bsssq.xyz/photography/new_post14/", "published_at": "2024-02-20T14:17:24+00:00" }, { "id": "01a0875a-289f-73bb-be98-2944676cce37", "title": "portra 800 [toronto + manitoba]", "url": "https://bsssq.xyz/photography/new_post11/", "published_at": "2024-01-25T14:01:53+00:00" }, { "id": "01a0875a-289f-73bb-be98-294467affa7c", "title": "neverMind", "url": "https://bsssq.xyz/posts/nevermind/", "published_at": "2024-01-18T16:05:32+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446890237d", "title": "cinestill 400d", "url": "https://bsssq.xyz/photography/new_post10/", "published_at": "2024-01-03T15:47:30+00:00" }, { "id": "01a0875a-289f-73bb-be98-294468afaafc", "title": "cookieJar", "url": "https://bsssq.xyz/posts/cookiejar/", "published_at": "2024-01-02T15:11:43+00:00" }, { "id": "01a0875a-289f-73bb-be98-294469aa63ea", "title": "violaTor", "url": "https://bsssq.xyz/posts/violat0r/", "published_at": "2023-12-21T16:17:54+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446a0f5fdb", "title": "portra 800", "url": "https://bsssq.xyz/photography/new_post9/", "published_at": "2023-12-20T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446a558548", "title": "tcpSACK", "url": "https://bsssq.xyz/posts/tcpsack0/", "published_at": "2023-12-07T20:14:13+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446b24cee4", "title": "gdbExtract", "url": "https://bsssq.xyz/posts/gdbextract/", "published_at": "2023-11-27T18:43:26+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446b95f6c1", "title": "tri-x 400", "url": "https://bsssq.xyz/photography/new_post/", "published_at": "2023-11-13T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446bcc3358", "title": "portra 800", "url": "https://bsssq.xyz/photography/new_post2/", "published_at": "2023-11-10T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446bdb7714", "title": "gold 200", "url": "https://bsssq.xyz/photography/new_post3/", "published_at": "2023-10-26T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446c29c757", "title": "gold 200", "url": "https://bsssq.xyz/photography/new_post6/", "published_at": "2023-09-10T17:16:38+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446c7e2d58", "title": "portra 800", "url": "https://bsssq.xyz/photography/new_post5/", "published_at": "2023-09-09T17:08:02+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446d730def", "title": "ultramax 400", "url": "https://bsssq.xyz/photography/new_post4/", "published_at": "2023-09-08T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446defca6c", "title": "gold 200", "url": "https://bsssq.xyz/photography/new_post7/", "published_at": "2023-07-25T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446e3aa402", "title": "intro + gold 200", "url": "https://bsssq.xyz/photography/new_post8/", "published_at": "2023-07-12T00:00:00+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446e5ec3b8", "title": "gatekeeper (buffer overflows)", "url": "https://bsssq.xyz/posts/gatekeeper/", "published_at": "2022-10-23T10:59:16+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446e7df9ab", "title": "jenkins", "url": "https://bsssq.xyz/posts/jenkins/", "published_at": "2022-01-08T19:37:40+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446f082b84", "title": "update", "url": "https://bsssq.xyz/posts/update/", "published_at": "2022-01-08T18:59:22+00:00" }, { "id": "01a0875a-289f-73bb-be98-29446f72f514", "title": "tryhackme: ra", "url": "https://bsssq.xyz/posts/ra/", "published_at": "2021-11-10T21:37:38+00:00" }, { "id": "01a0875a-289f-73bb-be98-2944703c5763", "title": "tryhackme: overpass2", "url": "https://bsssq.xyz/posts/overpass2/", "published_at": "2021-10-27T12:16:04+00:00" }, { "id": "01a0875a-289f-73bb-be98-2944705e1e40", "title": "tryhackme: game zone", "url": "https://bsssq.xyz/posts/gz_walkthrough/", "published_at": "2021-10-26T13:21:48+00:00" }, { "id": "01a0875a-289f-73bb-be98-294470937787", "title": "intro to hacking", "url": "https://bsssq.xyz/posts/cybersec/intro/", "published_at": "2021-10-24T06:43:33+00:00" }, { "id": "01a0875a-289f-73bb-be98-294470cc001d", "title": "cracks", "url": "https://bsssq.xyz/posts/cracks/", "published_at": "2021-02-15T06:43:33+00:00" }, { "id": "01a0875a-289f-73bb-be98-294470e40e47", "title": "| ༧", "url": "https://bsssq.xyz/cv/", "published_at": null } ] posts Claim your blog
Back to bsssq.xyz
Blog · corpus.blog/blogs/bsssq.xyz/posts

bsssq.xyz

bsssq.xyz

2026

bypassing Gatekeeper via symlinksoriginal ↗
12 Jan 2026

2025

iota part 2 - evolutionoriginal ↗
2 Dec 2025
iota part 1 - building a self-hosted CloudTrail detection engineoriginal ↗
28 Nov 2025
cve-2025-43330: breaking out of a sandbox using font filesoriginal ↗
16 Sept 2025
reverse engineering malware in a container - part 1original ↗
17 Apr 2025
clusterfuck: attack sims on k8s clustersoriginal ↗
9 Apr 2025

2024

PEB walking off the beaten pathoriginal ↗
14 Dec 2024
hooking functions to hide system artifactsoriginal ↗
1 Dec 2024
advanced memory protection bypasses, part 2: bypassing DEPoriginal ↗
23 Nov 2024
advanced memory protection bypasses, part 1: bypassing ASLRoriginal ↗
9 Nov 2024
exploiting driver-based vulnerabilitiesoriginal ↗
6 Nov 2024
advanced evasions, part 2: implementing minidump structuresoriginal ↗
25 Oct 2024
credential access in macOSoriginal ↗
8 Oct 2024
advanced evasions, part 1: PE maps + custom minidumpersoriginal ↗
7 Oct 2024
reading list [updated]original ↗
7 Oct 2024
sunday scaries: exploiting web appsoriginal ↗
29 Sept 2024
cosmos, part 2: domain + forest compromiseoriginal ↗
27 Sept 2024
cosmos, part 1: red-teaming corporate active directory forestsoriginal ↗
19 Sept 2024
goL0: reverse engineering + malware analysisoriginal ↗
26 Aug 2024
goPro: detecting process hollowing with Gooriginal ↗
12 Aug 2024
ultramax 400 [eclipse in toronto]original ↗
10 Apr 2024
ultramax 400original ↗
10 Mar 2024
portra 800 [manitoba]original ↗
20 Feb 2024
portra 800 [toronto + manitoba]original ↗
25 Jan 2024
neverMindoriginal ↗
18 Jan 2024
cinestill 400doriginal ↗
3 Jan 2024
cookieJaroriginal ↗
2 Jan 2024

2023

violaTororiginal ↗
21 Dec 2023
portra 800original ↗
20 Dec 2023
tcpSACKoriginal ↗
7 Dec 2023
gdbExtractoriginal ↗
27 Nov 2023
tri-x 400original ↗
13 Nov 2023
portra 800original ↗
10 Nov 2023
gold 200original ↗
26 Oct 2023
gold 200original ↗
10 Sept 2023
portra 800original ↗
9 Sept 2023
ultramax 400original ↗
8 Sept 2023
gold 200original ↗
25 Jul 2023
intro + gold 200original ↗
12 Jul 2023

2022

gatekeeper (buffer overflows)original ↗
23 Oct 2022
jenkinsoriginal ↗
8 Jan 2022
updateoriginal ↗
8 Jan 2022

2021

tryhackme: raoriginal ↗
10 Nov 2021
tryhackme: overpass2original ↗
27 Oct 2021
tryhackme: game zoneoriginal ↗
26 Oct 2021
intro to hackingoriginal ↗
24 Oct 2021
cracksoriginal ↗
15 Feb 2021

Undated

| ༧original ↗
—