41554 blogs · [ { "id": "01a095ad-2b25-7303-8f5c-9bf9b0067084", "title": "Weaponizing Starlark: Non-Executable Malware and Scriptable C2 Agents", "url": "https://jm33.me/weaponizing-starlark-non-executable-malware-and-scriptable-c2-agents.html", "published_at": "2026-09-11T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671454d405", "title": "Learning AD by Building a C2: Exploiting Constrained Delegation with emp3r0r", "url": "https://jm33.me/learning-ad-by-building-a-c2-exploiting-constrained-delegation-with-emp3r0r.html", "published_at": "2026-09-09T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267152083d8", "title": "Learning AD by Building a C2: Exploiting RBCD with emp3r0r", "url": "https://jm33.me/learning-ad-by-building-a-c2-exploiting-rbcd-with-emp3r0r.html", "published_at": "2026-09-07T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126715f67486", "title": "Making Linux Malware Suck Less: Stealthy Initial Access with emp3r0r Stager", "url": "https://jm33.me/making-linux-malware-suck-less-stealthy-initial-access-with-emp3r0r-stager.html", "published_at": "2026-08-23T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267160e620c", "title": "Some Notes on Call Stack Spoofing", "url": "https://jm33.me/some-notes-on-call-stack-spoofing.html", "published_at": "2026-08-20T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126716f13154", "title": "Analysing an Unexciting Commodity Malware", "url": "https://jm33.me/analysing-an-unexciting-commodity-malware.html", "published_at": "2026-07-18T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126717c81c29", "title": "Writing a Linux BOF Loader from Scratch", "url": "https://jm33.me/writing-a-linux-bof-loader-from-scratch.html", "published_at": "2026-01-16T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267181ce230", "title": "sRDI for Linux: Stealthy In-Memory ELF Loading", "url": "https://jm33.me/srdi-for-linux-stealthy-in-memory-elf-loading.html", "published_at": "2025-12-13T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267187d419c", "title": "Reversing a Nim-based APT Sample with Ghidra and x64dbg", "url": "https://jm33.me/reversing-a-nim-based-apt-sample-with-ghidra-and-x64dbg.html", "published_at": "2025-11-13T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126718aee208", "title": "Offensive CGO - An ELF Loader", "url": "https://jm33.me/offensive-cgo-an-elf-loader.html", "published_at": "2025-01-23T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126718ee359b", "title": "Reversing a Go Malware Using Ghidra", "url": "https://jm33.me/reversing-a-go-malware-using-ghidra.html", "published_at": "2023-12-07T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267197abc28", "title": "Secure Boot in Arch Linux", "url": "https://jm33.me/secure-boot-in-arch-linux.html", "published_at": "2023-07-16T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671992c077", "title": "OpenSSH Server 密码收割机", "url": "https://jm33.me/openssh-server-mi-ma-shou-ge-ji.html", "published_at": "2023-06-05T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671a87706a", "title": "Migrating from Libvirt to Qemu", "url": "https://jm33.me/migrating-from-libvirt-to-qemu.html", "published_at": "2023-06-03T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671b1ad4a2", "title": "Secure Boot and LKM Signing in Fedora", "url": "https://jm33.me/secure-boot-and-lkm-signing-in-fedora.html", "published_at": "2022-07-03T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671ba9b8dd", "title": "Fully Interactive Remote Shell for Windows", "url": "https://jm33.me/fully-interactive-remote-shell-for-windows.html", "published_at": "2022-04-21T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671c152f1e", "title": "Use Python for Linux Post-Exploitation", "url": "https://jm33.me/use-python-for-linux-post-exploitation.html", "published_at": "2022-03-11T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671cae318d", "title": "emp3r0r - Injection", "url": "https://jm33.me/emp3r0r-injection.html", "published_at": "2022-02-04T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671da8eb5d", "title": "emp3r0r - SSH", "url": "https://jm33.me/emp3r0r-ssh.html", "published_at": "2021-09-13T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671e707917", "title": "CSE548 - Bridges and Switches", "url": "https://jm33.me/cse548-bridges-and-switches.html", "published_at": "2021-06-02T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671ee4862e", "title": "Enable Mouse Natural Scroll In Windows 10", "url": "https://jm33.me/enable-mouse-natural-scroll-in-windows-10.html", "published_at": "2021-04-30T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671f7f236f", "title": "QQ Is Reading Your Browsing History", "url": "https://jm33.me/qq-is-reading-your-browsing-history.html", "published_at": "2021-01-21T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672073d21e", "title": "emp3r0r - 0x00", "url": "https://jm33.me/emp3r0r-0x00.html", "published_at": "2021-01-18T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672106683f", "title": "emp3r0r - Process Injection And Persistence", "url": "https://jm33.me/emp3r0r-process-injection-and-persistence.html", "published_at": "2021-01-18T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126721f90c74", "title": "emp3r0r - Break Out Of Internal Network", "url": "https://jm33.me/emp3r0r-break-out-of-internal-network.html", "published_at": "2021-01-05T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126722c576dd", "title": "SSHD Injection and Password Harvesting", "url": "https://jm33.me/sshd-injection-and-password-harvesting.html", "published_at": "2020-08-30T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126723089610", "title": "Process Injection On Linux", "url": "https://jm33.me/process-injection-on-linux.html", "published_at": "2020-08-15T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267235f2a47", "title": "Make HTTP/2 Requests Via Proxy In Golang", "url": "https://jm33.me/make-http2-requests-via-proxy-in-golang.html", "published_at": "2020-07-14T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672402f3b0", "title": "Digging Into A macOS Kernel Panic", "url": "https://jm33.me/digging-into-a-macos-kernel-panic.html", "published_at": "2020-06-21T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672451cecb", "title": "Delete An Entry From wtmp/btmp/utmp Log Files", "url": "https://jm33.me/delete-an-entry-from-wtmpbtmputmp-log-files.html", "published_at": "2020-06-04T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672515da5c", "title": "404", "url": "https://jm33.me/404.html", "published_at": "2020-04-19T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126725a142c7", "title": "Set Up AD Domain Over VPN", "url": "https://jm33.me/set-up-ad-domain-over-vpn.html", "published_at": "2020-04-19T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267268fc68f", "title": "emp3r0r - 0x03", "url": "https://jm33.me/emp3r0r-0x03.html", "published_at": "2020-03-10T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126727090a28", "title": "An Update to MEC", "url": "https://jm33.me/an-update-to-mec.html", "published_at": "2020-02-28T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126727e384c2", "title": "emp3r0r - 0x02", "url": "https://jm33.me/emp3r0r-0x02.html", "published_at": "2020-02-18T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267284aad41", "title": "Use `su -c` in LPE", "url": "https://jm33.me/use-su-c-in-lpe.html", "published_at": "2020-02-09T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267287194a9", "title": "emp3r0r - 0x01", "url": "https://jm33.me/emp3r0r-0x01.html", "published_at": "2020-01-23T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267287f7c06", "title": "Linux Rootkit for Fun and Profit - 0x04 - emp3r0r", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x04-emp3r0r.html", "published_at": "2020-01-15T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267291c7300", "title": "Killer Wireless Kills My Network", "url": "https://jm33.me/killer-wireless-kills-my-network.html", "published_at": "2019-12-17T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672934a9c0", "title": "Hook System Calls in Linux 5.x", "url": "https://jm33.me/hook-system-calls-in-linux-5x.html", "published_at": "2019-12-11T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126729864742", "title": "We Can No Longer Easily Disable CR0 WP (Write-Protection)", "url": "https://jm33.me/we-can-no-longer-easily-disable-cr0-wp-write-protection.html", "published_at": "2019-12-11T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b91f336c40", "title": "Linux Rootkit for Fun and Profit - 0x03 - LKM - Hide from ss/netstat", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x03-lkm-hide-from-ssnetstat.html", "published_at": "2019-12-10T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b91faf7fb1", "title": "Linux Rootkit for Fun and Profit - 0x02 - LKM - Hide files/procs", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x02-lkm-hide-filesprocs.html", "published_at": "2019-12-05T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9204f5818", "title": "Linux Rootkit for Fun and Profit - 0x01 - LKM", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x01-lkm.html", "published_at": "2019-12-04T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b920a47172", "title": "Linux Rootkit for Fun and Profit - 0x00 - Design", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x00-design.html", "published_at": "2019-12-03T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9214b3a9d", "title": "CVE-2019-13272: Linux LPE via 'PTRACE_TRACEME'", "url": "https://jm33.me/cve-2019-13272-linux-lpe-via-ptrace_traceme.html", "published_at": "2019-08-22T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9214ddeb2", "title": "CVE-2019-12735: Vim/NeoVim modeline RCE漏洞分析", "url": "https://jm33.me/cve-2019-12735-vimneovim-modeline-rcelou-dong-fen-xi.html", "published_at": "2019-06-28T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92167a80d", "title": "CVE-2018-18955 - A Handy LPE for Newer Linux Kernels", "url": "https://jm33.me/cve-2018-18955-a-handy-lpe-for-newer-linux-kernels.html", "published_at": "2019-01-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92216e4d8", "title": "An RCE Approach of CVE-2018-7750", "url": "https://jm33.me/an-rce-approach-of-cve-2018-7750.html", "published_at": "2018-11-06T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b922d75d35", "title": "Write Better Linux Rootkits", "url": "https://jm33.me/write-better-linux-rootkits.html", "published_at": "2018-10-31T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92325ab86", "title": "Enabling New PGP Key", "url": "https://jm33.me/enabling-new-pgp-key.html", "published_at": "2018-10-18T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92419fed0", "title": "How To Run GUI Programs With sudo Under Wayland", "url": "https://jm33.me/how-to-run-gui-programs-with-sudo-under-wayland.html", "published_at": "2018-08-13T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b924bca2f9", "title": "Working in TMUX", "url": "https://jm33.me/working-in-tmux.html", "published_at": "2018-08-11T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b924edd98a", "title": "Use Shadowsocks as Transparent Proxy (like GFW doesn't exist)", "url": "https://jm33.me/use-shadowsocks-as-transparent-proxy-like-gfw-doesnt-exist.html", "published_at": "2018-07-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9256d8670", "title": "To My Graduation", "url": "https://jm33.me/to-my-graduation.html", "published_at": "2018-07-14T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b925fa5e96", "title": "Parsing Large XML With Go", "url": "https://jm33.me/parsing-large-xml-with-go.html", "published_at": "2017-11-25T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b926506b37", "title": "How to Use Cisco Anyconnect VPN - Certificate based authentication", "url": "https://jm33.me/how-to-use-cisco-anyconnect-vpn-certificate-based-authentication.html", "published_at": "2017-10-29T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b926fe7f29", "title": "如何使用Cisco Anyconnect VPN - 基于证书的认证", "url": "https://jm33.me/ru-he-shi-yong-cisco-anyconnect-vpn-ji-yu-zheng-shu-de-ren-zheng.html", "published_at": "2017-10-28T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9274af398", "title": "MassExpConsle - User Guide", "url": "https://jm33.me/massexpconsle-user-guide.html", "published_at": "2017-05-31T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9278d23a2", "title": "A Hacking Console - Rewritten", "url": "https://jm33.me/a-hacking-console-rewritten.html", "published_at": "2017-05-10T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92882b679", "title": "A Hacking Console (Upgraded) - massExploitConsole", "url": "https://jm33.me/a-hacking-console-upgraded-massexploitconsole.html", "published_at": "2017-04-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b928c443a2", "title": "A Hacking Console", "url": "https://jm33.me/a-hacking-console.html", "published_at": "2017-03-10T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9292e4149", "title": "极路由3 LEDE + Shadowsocks + Mentohust (含所需文件tarball下载)", "url": "https://jm33.me/ji-lu-you-3-lede-shadowsocks-mentohust-han-suo-xu-wen-jian-tarballxia-zai.html", "published_at": "2017-02-20T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92980edaa", "title": "Using KCPTUN to Speed Up Your Proxy", "url": "https://jm33.me/using-kcptun-to-speed-up-your-proxy.html", "published_at": "2016-11-30T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92a582a58", "title": "No Title", "url": "https://jm33.me/no-title.html", "published_at": "2016-11-20T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92b4ead29", "title": "Using Obfs4proxy to obfuscate your non-TOR proxy / 为Shadowsocks路由器增加Obfs4混淆", "url": "https://jm33.me/using-obfs4proxy-to-obfuscate-your-non-tor-proxy-wei-shadowsockslu-you-qi-zeng-jia-obfs4hun-yao.html", "published_at": "2016-10-11T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92b8204de", "title": "搭建Cisco Anyconnect VPN服务器", "url": "https://jm33.me/da-jian-cisco-anyconnect-vpnfu-wu-qi.html", "published_at": "2016-10-05T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92c57c288", "title": "A reverse shell written in Golang", "url": "https://jm33.me/a-reverse-shell-written-in-golang.html", "published_at": "2016-10-01T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92caca8e5", "title": "Switched to Xfce4 Desktop", "url": "https://jm33.me/switched-to-xfce4-desktop.html", "published_at": "2016-09-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92d2bf59b", "title": "使用Shadowsocks-Plus整合KCPTUN加速", "url": "https://jm33.me/shi-yong-shadowsocks-pluszheng-he-kcptunjia-su.html", "published_at": "2016-08-25T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92d93c1a8", "title": "My First C-Sharp Project", "url": "https://jm33.me/my-first-c-sharp-project.html", "published_at": "2016-08-24T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92df87af5", "title": "Cryptography - Week 1", "url": "https://jm33.me/cryptography-week-1.html", "published_at": "2016-08-16T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92e647105", "title": "极路由hosts修改 (无行数限制)", "url": "https://jm33.me/ji-lu-you-hostsxiu-gai-wu-xing-shu-xian-zhi.html", "published_at": "2016-08-03T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92e778647", "title": "NetCat - File Transfer and More", "url": "https://jm33.me/netcat-file-transfer-and-more.html", "published_at": "2016-07-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92e841a8c", "title": "极路由4使用Shadowsocks插件(含web配置面板)", "url": "https://jm33.me/ji-lu-you-4shi-yong-shadowsockscha-jian-han-webpei-zhi-mian-ban.html", "published_at": "2016-07-15T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92f1c4be8", "title": "Secure Your Email with PGP", "url": "https://jm33.me/secure-your-email-with-pgp.html", "published_at": "2016-06-03T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92f6e6c88", "title": "Using OCSERV On An HTTPS server", "url": "https://jm33.me/using-ocserv-on-an-https-server.html", "published_at": "2016-05-25T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b930676ac1", "title": "Build Your Own Anyconnect VPN", "url": "https://jm33.me/build-your-own-anyconnect-vpn.html", "published_at": "2016-05-24T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b930c03fb6", "title": "Enabling HTTP2", "url": "https://jm33.me/enabling-http2.html", "published_at": "2016-05-24T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9311794cd", "title": "Sh4d0ws0cks Over Obfsproxy (Scramblesuit)", "url": "https://jm33.me/sh4d0ws0cks-over-obfsproxy-scramblesuit.html", "published_at": "2016-05-15T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b93208273f", "title": "Glowing Bear", "url": "https://jm33.me/glowing-bear.html", "published_at": "2016-05-08T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9329c35f6", "title": "A Tour Of Go - My First Step To Golang", "url": "https://jm33.me/a-tour-of-go-my-first-step-to-golang.html", "published_at": "2016-04-18T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b932fd03db", "title": "使用Obfsproxy (Scramblesuit) 混淆sh4d0ws0cks流量", "url": "https://jm33.me/shi-yong-obfsproxy-scramblesuit-hun-yao-sh4d0ws0cksliu-liang.html", "published_at": "2016-04-15T16:00:00+00:00" } ] posts Claim your blog
Back to jm33.me
Blog · corpus.blog/blogs/jm33.me/posts

jm33.me

jm33.me

2026

2025

2023

2022

2021

2020

19 Apr 2020

2019

2018

2017

2016