corpus.blog
Most cited
Talked about
Blogs
41554 blogs · [ { "id": "01a08770-3405-7219-ba7b-4499deb51c16", "title": "Fileless lateral movement with trapped COM objects", "url": "https://dtsec.us/2025-03-25-fileless-lateral-movement-trapped-com-objects/", "published_at": "2025-03-25T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499deff859c", "title": "Module Stomping", "url": "https://dtsec.us/2023-11-04-ModuleStompin/", "published_at": "2023-11-04T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499dfbc361c", "title": "Reflective call stack detections and evasions", "url": "https://dtsec.us/2023-10-06-reflective-call-stack-detections-evasions/", "published_at": "2023-10-06T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e0770879", "title": "An Introduction into Stack Spoofing", "url": "https://dtsec.us/2023-09-15-StackSpoofin/", "published_at": "2023-09-15T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e0fd55f4", "title": "An Introduction into Sleep Obfuscation", "url": "https://dtsec.us/2023-04-24-Sleep/", "published_at": "2023-04-24T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e1ca75f5", "title": "Abusing JIT compilation with Indirect Syscalls", "url": "https://dtsec.us/2022-10-02-NoGate2/", "published_at": "2022-10-02T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e20024ae", "title": "CRTO Review", "url": "https://dtsec.us/2022-09-21-CRTO/", "published_at": "2022-09-21T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e230ae69", "title": "SharpHellsGate with no Gate and weird .NET memory stuff", "url": "https://dtsec.us/2022-08-14-NoGate/", "published_at": "2022-08-14T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e2875320", "title": "Deploying .NET in memory with Dinvoke", "url": "https://dtsec.us/2022-06-26-Donut_2/", "published_at": "2022-06-26T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e383aba7", "title": "Deploying .NET in memory with Donut", "url": "https://dtsec.us/2022-05-12-Donut_1/", "published_at": "2022-05-12T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e42d27e8", "title": "Sink", "url": "https://dtsec.us/2022-05-06-Sink/", "published_at": "2022-05-06T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e4794447", "title": "Multimaster", "url": "https://dtsec.us/2022-04-22-Multimaster/", "published_at": "2022-04-22T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e4d3825f", "title": "Sizzle", "url": "https://dtsec.us/2022-04-20-Sizzle/", "published_at": "2022-04-20T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e5b3ad82", "title": "The OSCP Odyssey", "url": "https://dtsec.us/2022-04-14-OSCP/", "published_at": "2022-04-14T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e67c884c", "title": "Firewalling with Iptables", "url": "https://dtsec.us/2022-03-28-iptables/", "published_at": "2022-03-28T04:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e6fa53d0", "title": "Bankrobber", "url": "https://dtsec.us/2021-12-26-Bankrobber/", "published_at": "2021-12-26T05:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e7c71ab8", "title": "Worker", "url": "https://dtsec.us/2021-12-07-Worker/", "published_at": "2021-12-07T05:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e83875dd", "title": "Blackfield", "url": "https://dtsec.us/2021-12-06-Blackfield/", "published_at": "2021-12-06T05:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e9280191", "title": "Resolute", "url": "https://dtsec.us/2021-12-05-Resolute/", "published_at": "2021-12-05T05:00:00+00:00" }, { "id": "01a08770-3405-7219-ba7b-4499e9d14f2e", "title": "Spider", "url": "https://dtsec.us/2021-11-01-Spider/", "published_at": "2021-11-01T04:00:00+00:00" } ] posts
Claim your blog
Back to dtsec.us
Blog · corpus.blog/blogs/dtsec.us/posts
dtsec.us
dtsec.us
2025
Fileless lateral movement with trapped COM objects
original ↗
25 Mar 2025
2023
Module Stomping
original ↗
4 Nov 2023
Reflective call stack detections and evasions
original ↗
6 Oct 2023
An Introduction into Stack Spoofing
original ↗
15 Sept 2023
An Introduction into Sleep Obfuscation
original ↗
24 Apr 2023
2022
Abusing JIT compilation with Indirect Syscalls
original ↗
2 Oct 2022
CRTO Review
original ↗
21 Sept 2022
SharpHellsGate with no Gate and weird .NET memory stuff
original ↗
14 Aug 2022
Deploying .NET in memory with Dinvoke
original ↗
26 Jun 2022
Deploying .NET in memory with Donut
original ↗
12 May 2022
Sink
original ↗
6 May 2022
Multimaster
original ↗
22 Apr 2022
Sizzle
original ↗
20 Apr 2022
The OSCP Odyssey
original ↗
14 Apr 2022
Firewalling with Iptables
original ↗
28 Mar 2022
2021
Bankrobber
original ↗
26 Dec 2021
Worker
original ↗
7 Dec 2021
Blackfield
original ↗
6 Dec 2021
Resolute
original ↗
5 Dec 2021
Spider
original ↗
1 Nov 2021