41554 blogs · [ { "id": "01a0876c-4fbd-73c7-91fb-066cf0a7d1d4", "title": "ANSI Escape Code Injection in OpenAI's Codex CLI Leading to RCE", "url": "https://dganev.com/posts/2026-02-12-ansi-escape-injection-codex-cli/", "published_at": "2026-02-12T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0c7605a65", "title": "Bypassing VSCode Copilot's Premium Requests", "url": "https://dganev.com/posts/2026-01-24-bypassing-copilot-requests/", "published_at": "2026-01-24T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0c8595722", "title": "Reverse Engineering: \"Tzar The Burden of the Crown\" - Part 1 (WDT Files)", "url": "https://dganev.com/posts/2025-11-28-re-tzar/", "published_at": "2025-11-28T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0c8edfa4f", "title": "Implementing custom autocomplete in VSCode", "url": "https://dganev.com/posts/2025-11-18-using-custom-autocomplete/", "published_at": "2025-11-18T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0c971158a", "title": "Bulgarian OSINT Guide", "url": "https://dganev.com/posts/2025-10-25-bulgarian-osint/", "published_at": "2025-10-25T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0ca366bc3", "title": "Tracking Down the Bulgarian Marketplace Scams", "url": "https://dganev.com/posts/2024-19-12-investigation-on-scams/", "published_at": "2024-12-19T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0cae20686", "title": "Static Analysis Research - Windows PE", "url": "https://dganev.com/posts/2023-01-06-static-analysis-research-p1/", "published_at": "2023-01-06T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0cb2d4ea9", "title": "Using DNS as C2 Communication - Evasive Techniques (Part 3)", "url": "https://dganev.com/posts/2022-10-26-dns-c2-communcation/", "published_at": "2022-10-26T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0cb9092f4", "title": "Dynamic Linker Hijacking Experiments - Evasive Techniques (Part 2)", "url": "https://dganev.com/posts/2022-10-04-dynamic-linker-hijacking-experiments-2/", "published_at": "2022-10-04T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0cc3cb90e", "title": "Dynamic Linker Hijacking Experiments - Evasive Techniques (Part 1)", "url": "https://dganev.com/posts/2022-10-02-dynamic-linker-hijacking-experiments/", "published_at": "2022-10-02T00:00:00+00:00" }, { "id": "01a094f0-3773-7285-9e58-3aad4bf9bcad", "title": "LegionTD2 Go SDK (v0.2.0)", "url": "https://dganev.com/posts/2022-08-23-legiontd2-sdk/", "published_at": "2022-08-23T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0cd1246fd", "title": "Create Plugin Architecture With Python", "url": "https://dganev.com/posts/2022-05-23-create-plugin-architecture-with-python/", "published_at": "2022-05-23T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0cd468ba1", "title": "Simple Fishing Bot for World of Warcraft", "url": "https://dganev.com/posts/2022-05-22-simple-fishing-bot/", "published_at": "2022-05-22T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0ce3acdaf", "title": "STIX/TAXII - Complete Knowledge", "url": "https://dganev.com/posts/2022-04-10-stix-taxii-complete-knowledge/", "published_at": "2022-04-10T00:00:00+00:00" }, { "id": "01a0876c-4fbe-70cc-99c5-d8a0ce9572ea", "title": "Installing Private Packages in Docker Image - Notes", "url": "https://dganev.com/posts/2021-05-27-installing-private-packages-in-docker-image-notes/", "published_at": "2021-05-27T00:00:00+00:00" }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6292b3c4", "title": null, "url": "https://dganev.com/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc62eccf28", "title": "About Me", "url": "https://dganev.com/about/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc633b6f04", "title": null, "url": "https://dganev.com/posts/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc699f534c", "title": null, "url": "https://dganev.com/projects/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc69fd69af", "title": null, "url": "https://dganev.com/talks/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6a9f7ad1", "title": "Converting Third-Party Threat Intelligence into VMware Carbon Black Cloud", "url": "https://dganev.com/talks/2022-09-01-threat-intelligence-vmware-carbon-black/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6ad78033", "title": "Hacking AI Agents: From Prompt Injection to Malicious MCP Servers", "url": "https://dganev.com/talks/2026-03-24-hacking-ai-agents-softuni/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6b7ac1a5", "title": null, "url": "https://dganev.com/writeups/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6c2a5246", "title": "4T$ CTF 2024 - Homelab ? More like Pwnlab !", "url": "https://dganev.com/writeups/4t-ctf-2024---homelab-more-like-pwnlab/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6d01df1f", "title": "4T$ CTF 2024 - My Sky Blog", "url": "https://dganev.com/writeups/4t-ctf-2024---my-sky-blog/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6d73d605", "title": "AlpacaHack Round 2 (Web) - CaaS (Cow as a Service)", "url": "https://dganev.com/writeups/alpacahackr2web-caas/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6e07cf92", "title": "AlpacaHack Round 2 (Web) - Pico Note 1", "url": "https://dganev.com/writeups/alpacahackr2web-pico-note-1/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6ef210d4", "title": "BlueHensCTF 2024 - Corkscrew", "url": "https://dganev.com/writeups/bluehensctf-2024---corkscrew/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc6fd8cdf3", "title": "BlueHensCTF 2024 - Firefun 3", "url": "https://dganev.com/writeups/bluehensctf-2024---firefun-3/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc702342f7", "title": "HTB Challenge - Gunship", "url": "https://dganev.com/writeups/htb-challenge---gunship/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc7041afc7", "title": "FLARE-On 2014 writeups", "url": "https://dganev.com/writeups/the-flare-on-2014/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc705f9cb4", "title": "zer0pts CTF 2023 - GitFile Explorer", "url": "https://dganev.com/writeups/zer0pts-ctf-2022---gitfile-explorer/", "published_at": null }, { "id": "01a0c7a0-f17c-73ee-bf2d-bbfc7096b2a6", "title": "zer0pts CTF 2023 - Neko Note", "url": "https://dganev.com/writeups/zer0pts-ctf-2023---neko-note/", "published_at": null } ] posts Claim your blog

Back to /home/dganev

Blog · corpus.blog/blogs/dganev.com/posts

/home/dganev

dganev.com

2026

ANSI Escape Code Injection in OpenAI's Codex CLI Leading to RCE original ↗

12 Feb 2026

Bypassing VSCode Copilot's Premium Requests original ↗

24 Jan 2026

2025

Reverse Engineering: "Tzar The Burden of the Crown" - Part 1 (WDT Files)original ↗

28 Nov 2025

Implementing custom autocomplete in VSCode original ↗

18 Nov 2025

Bulgarian OSINT Guide original ↗

25 Oct 2025

2024

Tracking Down the Bulgarian Marketplace Scams original ↗

19 Dec 2024

2023

Static Analysis Research - Windows PE original ↗

6 Jan 2023

2022

Using DNS as C2 Communication - Evasive Techniques (Part 3)original ↗

26 Oct 2022

Dynamic Linker Hijacking Experiments - Evasive Techniques (Part 2)original ↗

4 Oct 2022

Dynamic Linker Hijacking Experiments - Evasive Techniques (Part 1)original ↗

2 Oct 2022

LegionTD2 Go SDK (v0.2.0)original ↗

23 Aug 2022

Create Plugin Architecture With Python original ↗

23 May 2022

Simple Fishing Bot for World of Warcraft original ↗

22 May 2022

STIX/TAXII - Complete Knowledge original ↗

10 Apr 2022

2021

Installing Private Packages in Docker Image - Notes original ↗

27 May 2021

Undated

https://dganev.com/original ↗

—

About Me original ↗

—

https://dganev.com/posts/original ↗

—

https://dganev.com/projects/original ↗

—

https://dganev.com/talks/original ↗

—

Converting Third-Party Threat Intelligence into VMware Carbon Black Cloud original ↗

—

Hacking AI Agents: From Prompt Injection to Malicious MCP Servers original ↗

—

https://dganev.com/writeups/original ↗

—

4T$ CTF 2024 - Homelab ? More like Pwnlab !original ↗

—

4T$ CTF 2024 - My Sky Blog original ↗

—

AlpacaHack Round 2 (Web) - CaaS (Cow as a Service)original ↗

—

AlpacaHack Round 2 (Web) - Pico Note 1 original ↗

—

BlueHensCTF 2024 - Corkscrew original ↗

—

BlueHensCTF 2024 - Firefun 3 original ↗

—

HTB Challenge - Gunship original ↗

—

FLARE-On 2014 writeups original ↗

—

zer0pts CTF 2023 - GitFile Explorer original ↗

—

zer0pts CTF 2023 - Neko Note original ↗

—