corpus.blog
41554 blogs · [ { "id": "01a095ad-2b25-7303-8f5c-9bf9b0067084", "title": "Weaponizing Starlark: Non-Executable Malware and Scriptable C2 Agents", "url": "https://jm33.me/weaponizing-starlark-non-executable-malware-and-scriptable-c2-agents.html", "published_at": "2026-09-11T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671454d405", "title": "Learning AD by Building a C2: Exploiting Constrained Delegation with emp3r0r", "url": "https://jm33.me/learning-ad-by-building-a-c2-exploiting-constrained-delegation-with-emp3r0r.html", "published_at": "2026-09-09T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267152083d8", "title": "Learning AD by Building a C2: Exploiting RBCD with emp3r0r", "url": "https://jm33.me/learning-ad-by-building-a-c2-exploiting-rbcd-with-emp3r0r.html", "published_at": "2026-09-07T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126715f67486", "title": "Making Linux Malware Suck Less: Stealthy Initial Access with emp3r0r Stager", "url": "https://jm33.me/making-linux-malware-suck-less-stealthy-initial-access-with-emp3r0r-stager.html", "published_at": "2026-08-23T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267160e620c", "title": "Some Notes on Call Stack Spoofing", "url": "https://jm33.me/some-notes-on-call-stack-spoofing.html", "published_at": "2026-08-20T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126716f13154", "title": "Analysing an Unexciting Commodity Malware", "url": "https://jm33.me/analysing-an-unexciting-commodity-malware.html", "published_at": "2026-07-18T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126717c81c29", "title": "Writing a Linux BOF Loader from Scratch", "url": "https://jm33.me/writing-a-linux-bof-loader-from-scratch.html", "published_at": "2026-01-16T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267181ce230", "title": "sRDI for Linux: Stealthy In-Memory ELF Loading", "url": "https://jm33.me/srdi-for-linux-stealthy-in-memory-elf-loading.html", "published_at": "2025-12-13T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267187d419c", "title": "Reversing a Nim-based APT Sample with Ghidra and x64dbg", "url": "https://jm33.me/reversing-a-nim-based-apt-sample-with-ghidra-and-x64dbg.html", "published_at": "2025-11-13T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126718aee208", "title": "Offensive CGO - An ELF Loader", "url": "https://jm33.me/offensive-cgo-an-elf-loader.html", "published_at": "2025-01-23T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126718ee359b", "title": "Reversing a Go Malware Using Ghidra", "url": "https://jm33.me/reversing-a-go-malware-using-ghidra.html", "published_at": "2023-12-07T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267197abc28", "title": "Secure Boot in Arch Linux", "url": "https://jm33.me/secure-boot-in-arch-linux.html", "published_at": "2023-07-16T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671992c077", "title": "OpenSSH Server 密码收割机", "url": "https://jm33.me/openssh-server-mi-ma-shou-ge-ji.html", "published_at": "2023-06-05T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671a87706a", "title": "Migrating from Libvirt to Qemu", "url": "https://jm33.me/migrating-from-libvirt-to-qemu.html", "published_at": "2023-06-03T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671b1ad4a2", "title": "Secure Boot and LKM Signing in Fedora", "url": "https://jm33.me/secure-boot-and-lkm-signing-in-fedora.html", "published_at": "2022-07-03T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671ba9b8dd", "title": "Fully Interactive Remote Shell for Windows", "url": "https://jm33.me/fully-interactive-remote-shell-for-windows.html", "published_at": "2022-04-21T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671c152f1e", "title": "Use Python for Linux Post-Exploitation", "url": "https://jm33.me/use-python-for-linux-post-exploitation.html", "published_at": "2022-03-11T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671cae318d", "title": "emp3r0r - Injection", "url": "https://jm33.me/emp3r0r-injection.html", "published_at": "2022-02-04T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671da8eb5d", "title": "emp3r0r - SSH", "url": "https://jm33.me/emp3r0r-ssh.html", "published_at": "2021-09-13T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671e707917", "title": "CSE548 - Bridges and Switches", "url": "https://jm33.me/cse548-bridges-and-switches.html", "published_at": "2021-06-02T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671ee4862e", "title": "Enable Mouse Natural Scroll In Windows 10", "url": "https://jm33.me/enable-mouse-natural-scroll-in-windows-10.html", "published_at": "2021-04-30T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12671f7f236f", "title": "QQ Is Reading Your Browsing History", "url": "https://jm33.me/qq-is-reading-your-browsing-history.html", "published_at": "2021-01-21T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672073d21e", "title": "emp3r0r - 0x00", "url": "https://jm33.me/emp3r0r-0x00.html", "published_at": "2021-01-18T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672106683f", "title": "emp3r0r - Process Injection And Persistence", "url": "https://jm33.me/emp3r0r-process-injection-and-persistence.html", "published_at": "2021-01-18T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126721f90c74", "title": "emp3r0r - Break Out Of Internal Network", "url": "https://jm33.me/emp3r0r-break-out-of-internal-network.html", "published_at": "2021-01-05T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126722c576dd", "title": "SSHD Injection and Password Harvesting", "url": "https://jm33.me/sshd-injection-and-password-harvesting.html", "published_at": "2020-08-30T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126723089610", "title": "Process Injection On Linux", "url": "https://jm33.me/process-injection-on-linux.html", "published_at": "2020-08-15T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267235f2a47", "title": "Make HTTP/2 Requests Via Proxy In Golang", "url": "https://jm33.me/make-http2-requests-via-proxy-in-golang.html", "published_at": "2020-07-14T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672402f3b0", "title": "Digging Into A macOS Kernel Panic", "url": "https://jm33.me/digging-into-a-macos-kernel-panic.html", "published_at": "2020-06-21T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672451cecb", "title": "Delete An Entry From wtmp/btmp/utmp Log Files", "url": "https://jm33.me/delete-an-entry-from-wtmpbtmputmp-log-files.html", "published_at": "2020-06-04T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672515da5c", "title": "404", "url": "https://jm33.me/404.html", "published_at": "2020-04-19T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126725a142c7", "title": "Set Up AD Domain Over VPN", "url": "https://jm33.me/set-up-ad-domain-over-vpn.html", "published_at": "2020-04-19T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267268fc68f", "title": "emp3r0r - 0x03", "url": "https://jm33.me/emp3r0r-0x03.html", "published_at": "2020-03-10T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126727090a28", "title": "An Update to MEC", "url": "https://jm33.me/an-update-to-mec.html", "published_at": "2020-02-28T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126727e384c2", "title": "emp3r0r - 0x02", "url": "https://jm33.me/emp3r0r-0x02.html", "published_at": "2020-02-18T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267284aad41", "title": "Use `su -c` in LPE", "url": "https://jm33.me/use-su-c-in-lpe.html", "published_at": "2020-02-09T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267287194a9", "title": "emp3r0r - 0x01", "url": "https://jm33.me/emp3r0r-0x01.html", "published_at": "2020-01-23T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267287f7c06", "title": "Linux Rootkit for Fun and Profit - 0x04 - emp3r0r", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x04-emp3r0r.html", "published_at": "2020-01-15T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-1267291c7300", "title": "Killer Wireless Kills My Network", "url": "https://jm33.me/killer-wireless-kills-my-network.html", "published_at": "2019-12-17T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-12672934a9c0", "title": "Hook System Calls in Linux 5.x", "url": "https://jm33.me/hook-system-calls-in-linux-5x.html", "published_at": "2019-12-11T16:00:00+00:00" }, { "id": "01a0878e-5c38-73fc-95d6-126729864742", "title": "We Can No Longer Easily Disable CR0 WP (Write-Protection)", "url": "https://jm33.me/we-can-no-longer-easily-disable-cr0-wp-write-protection.html", "published_at": "2019-12-11T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b91f336c40", "title": "Linux Rootkit for Fun and Profit - 0x03 - LKM - Hide from ss/netstat", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x03-lkm-hide-from-ssnetstat.html", "published_at": "2019-12-10T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b91faf7fb1", "title": "Linux Rootkit for Fun and Profit - 0x02 - LKM - Hide files/procs", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x02-lkm-hide-filesprocs.html", "published_at": "2019-12-05T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9204f5818", "title": "Linux Rootkit for Fun and Profit - 0x01 - LKM", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x01-lkm.html", "published_at": "2019-12-04T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b920a47172", "title": "Linux Rootkit for Fun and Profit - 0x00 - Design", "url": "https://jm33.me/linux-rootkit-for-fun-and-profit-0x00-design.html", "published_at": "2019-12-03T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9214b3a9d", "title": "CVE-2019-13272: Linux LPE via 'PTRACE_TRACEME'", "url": "https://jm33.me/cve-2019-13272-linux-lpe-via-ptrace_traceme.html", "published_at": "2019-08-22T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9214ddeb2", "title": "CVE-2019-12735: Vim/NeoVim modeline RCE漏洞分析", "url": "https://jm33.me/cve-2019-12735-vimneovim-modeline-rcelou-dong-fen-xi.html", "published_at": "2019-06-28T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92167a80d", "title": "CVE-2018-18955 - A Handy LPE for Newer Linux Kernels", "url": "https://jm33.me/cve-2018-18955-a-handy-lpe-for-newer-linux-kernels.html", "published_at": "2019-01-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92216e4d8", "title": "An RCE Approach of CVE-2018-7750", "url": "https://jm33.me/an-rce-approach-of-cve-2018-7750.html", "published_at": "2018-11-06T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b922d75d35", "title": "Write Better Linux Rootkits", "url": "https://jm33.me/write-better-linux-rootkits.html", "published_at": "2018-10-31T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92325ab86", "title": "Enabling New PGP Key", "url": "https://jm33.me/enabling-new-pgp-key.html", "published_at": "2018-10-18T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92419fed0", "title": "How To Run GUI Programs With sudo Under Wayland", "url": "https://jm33.me/how-to-run-gui-programs-with-sudo-under-wayland.html", "published_at": "2018-08-13T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b924bca2f9", "title": "Working in TMUX", "url": "https://jm33.me/working-in-tmux.html", "published_at": "2018-08-11T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b924edd98a", "title": "Use Shadowsocks as Transparent Proxy (like GFW doesn't exist)", "url": "https://jm33.me/use-shadowsocks-as-transparent-proxy-like-gfw-doesnt-exist.html", "published_at": "2018-07-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9256d8670", "title": "To My Graduation", "url": "https://jm33.me/to-my-graduation.html", "published_at": "2018-07-14T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b925fa5e96", "title": "Parsing Large XML With Go", "url": "https://jm33.me/parsing-large-xml-with-go.html", "published_at": "2017-11-25T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b926506b37", "title": "How to Use Cisco Anyconnect VPN - Certificate based authentication", "url": "https://jm33.me/how-to-use-cisco-anyconnect-vpn-certificate-based-authentication.html", "published_at": "2017-10-29T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b926fe7f29", "title": "如何使用Cisco Anyconnect VPN - 基于证书的认证", "url": "https://jm33.me/ru-he-shi-yong-cisco-anyconnect-vpn-ji-yu-zheng-shu-de-ren-zheng.html", "published_at": "2017-10-28T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9274af398", "title": "MassExpConsle - User Guide", "url": "https://jm33.me/massexpconsle-user-guide.html", "published_at": "2017-05-31T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9278d23a2", "title": "A Hacking Console - Rewritten", "url": "https://jm33.me/a-hacking-console-rewritten.html", "published_at": "2017-05-10T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92882b679", "title": "A Hacking Console (Upgraded) - massExploitConsole", "url": "https://jm33.me/a-hacking-console-upgraded-massexploitconsole.html", "published_at": "2017-04-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b928c443a2", "title": "A Hacking Console", "url": "https://jm33.me/a-hacking-console.html", "published_at": "2017-03-10T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9292e4149", "title": "极路由3 LEDE + Shadowsocks + Mentohust (含所需文件tarball下载)", "url": "https://jm33.me/ji-lu-you-3-lede-shadowsocks-mentohust-han-suo-xu-wen-jian-tarballxia-zai.html", "published_at": "2017-02-20T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92980edaa", "title": "Using KCPTUN to Speed Up Your Proxy", "url": "https://jm33.me/using-kcptun-to-speed-up-your-proxy.html", "published_at": "2016-11-30T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92a582a58", "title": "No Title", "url": "https://jm33.me/no-title.html", "published_at": "2016-11-20T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92b4ead29", "title": "Using Obfs4proxy to obfuscate your non-TOR proxy / 为Shadowsocks路由器增加Obfs4混淆", "url": "https://jm33.me/using-obfs4proxy-to-obfuscate-your-non-tor-proxy-wei-shadowsockslu-you-qi-zeng-jia-obfs4hun-yao.html", "published_at": "2016-10-11T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92b8204de", "title": "搭建Cisco Anyconnect VPN服务器", "url": "https://jm33.me/da-jian-cisco-anyconnect-vpnfu-wu-qi.html", "published_at": "2016-10-05T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92c57c288", "title": "A reverse shell written in Golang", "url": "https://jm33.me/a-reverse-shell-written-in-golang.html", "published_at": "2016-10-01T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92caca8e5", "title": "Switched to Xfce4 Desktop", "url": "https://jm33.me/switched-to-xfce4-desktop.html", "published_at": "2016-09-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92d2bf59b", "title": "使用Shadowsocks-Plus整合KCPTUN加速", "url": "https://jm33.me/shi-yong-shadowsocks-pluszheng-he-kcptunjia-su.html", "published_at": "2016-08-25T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92d93c1a8", "title": "My First C-Sharp Project", "url": "https://jm33.me/my-first-c-sharp-project.html", "published_at": "2016-08-24T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92df87af5", "title": "Cryptography - Week 1", "url": "https://jm33.me/cryptography-week-1.html", "published_at": "2016-08-16T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92e647105", "title": "极路由hosts修改 (无行数限制)", "url": "https://jm33.me/ji-lu-you-hostsxiu-gai-wu-xing-shu-xian-zhi.html", "published_at": "2016-08-03T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92e778647", "title": "NetCat - File Transfer and More", "url": "https://jm33.me/netcat-file-transfer-and-more.html", "published_at": "2016-07-23T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92e841a8c", "title": "极路由4使用Shadowsocks插件（含web配置面板）", "url": "https://jm33.me/ji-lu-you-4shi-yong-shadowsockscha-jian-han-webpei-zhi-mian-ban.html", "published_at": "2016-07-15T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92f1c4be8", "title": "Secure Your Email with PGP", "url": "https://jm33.me/secure-your-email-with-pgp.html", "published_at": "2016-06-03T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b92f6e6c88", "title": "Using OCSERV On An HTTPS server", "url": "https://jm33.me/using-ocserv-on-an-https-server.html", "published_at": "2016-05-25T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b930676ac1", "title": "Build Your Own Anyconnect VPN", "url": "https://jm33.me/build-your-own-anyconnect-vpn.html", "published_at": "2016-05-24T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b930c03fb6", "title": "Enabling HTTP2", "url": "https://jm33.me/enabling-http2.html", "published_at": "2016-05-24T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9311794cd", "title": "Sh4d0ws0cks Over Obfsproxy (Scramblesuit)", "url": "https://jm33.me/sh4d0ws0cks-over-obfsproxy-scramblesuit.html", "published_at": "2016-05-15T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b93208273f", "title": "Glowing Bear", "url": "https://jm33.me/glowing-bear.html", "published_at": "2016-05-08T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b9329c35f6", "title": "A Tour Of Go - My First Step To Golang", "url": "https://jm33.me/a-tour-of-go-my-first-step-to-golang.html", "published_at": "2016-04-18T16:00:00+00:00" }, { "id": "01a0878e-5c39-71ce-a154-47b932fd03db", "title": "使用Obfsproxy (Scramblesuit) 混淆sh4d0ws0cks流量", "url": "https://jm33.me/shi-yong-obfsproxy-scramblesuit-hun-yao-sh4d0ws0cksliu-liang.html", "published_at": "2016-04-15T16:00:00+00:00" } ] posts Claim your blog
Back to jm33.me
Blog · corpus.blog/blogs/jm33.me/posts

jm33.me

jm33.me

2026

Weaponizing Starlark: Non-Executable Malware and Scriptable C2 Agentsoriginal ↗
11 Sept 2026
Learning AD by Building a C2: Exploiting Constrained Delegation with emp3r0roriginal ↗
9 Sept 2026
Learning AD by Building a C2: Exploiting RBCD with emp3r0roriginal ↗
7 Sept 2026
Making Linux Malware Suck Less: Stealthy Initial Access with emp3r0r Stageroriginal ↗
23 Aug 2026
Some Notes on Call Stack Spoofingoriginal ↗
20 Aug 2026
Analysing an Unexciting Commodity Malwareoriginal ↗
18 Jul 2026
Writing a Linux BOF Loader from Scratchoriginal ↗
16 Jan 2026

2025

sRDI for Linux: Stealthy In-Memory ELF Loadingoriginal ↗
13 Dec 2025
Reversing a Nim-based APT Sample with Ghidra and x64dbgoriginal ↗
13 Nov 2025
Offensive CGO - An ELF Loaderoriginal ↗
23 Jan 2025

2023

Reversing a Go Malware Using Ghidraoriginal ↗
7 Dec 2023
Secure Boot in Arch Linuxoriginal ↗
16 Jul 2023
OpenSSH Server 密码收割机original ↗
5 Jun 2023
Migrating from Libvirt to Qemuoriginal ↗
3 Jun 2023

2022

Secure Boot and LKM Signing in Fedoraoriginal ↗
3 Jul 2022
Fully Interactive Remote Shell for Windowsoriginal ↗
21 Apr 2022
Use Python for Linux Post-Exploitationoriginal ↗
11 Mar 2022
emp3r0r - Injectionoriginal ↗
4 Feb 2022

2021

emp3r0r - SSHoriginal ↗
13 Sept 2021
CSE548 - Bridges and Switchesoriginal ↗
2 Jun 2021
Enable Mouse Natural Scroll In Windows 10original ↗
30 Apr 2021
QQ Is Reading Your Browsing Historyoriginal ↗
21 Jan 2021
emp3r0r - 0x00original ↗
18 Jan 2021
emp3r0r - Process Injection And Persistenceoriginal ↗
18 Jan 2021
emp3r0r - Break Out Of Internal Networkoriginal ↗
5 Jan 2021

2020

SSHD Injection and Password Harvestingoriginal ↗
30 Aug 2020
Process Injection On Linuxoriginal ↗
15 Aug 2020
Make HTTP/2 Requests Via Proxy In Golangoriginal ↗
14 Jul 2020
Digging Into A macOS Kernel Panicoriginal ↗
21 Jun 2020
Delete An Entry From wtmp/btmp/utmp Log Filesoriginal ↗
4 Jun 2020
404original ↗
19 Apr 2020
Set Up AD Domain Over VPNoriginal ↗
19 Apr 2020
emp3r0r - 0x03original ↗
10 Mar 2020
An Update to MECoriginal ↗
28 Feb 2020
emp3r0r - 0x02original ↗
18 Feb 2020
Use `su -c` in LPEoriginal ↗
9 Feb 2020
emp3r0r - 0x01original ↗
23 Jan 2020
Linux Rootkit for Fun and Profit - 0x04 - emp3r0roriginal ↗
15 Jan 2020

2019

Killer Wireless Kills My Networkoriginal ↗
17 Dec 2019
Hook System Calls in Linux 5.xoriginal ↗
11 Dec 2019
We Can No Longer Easily Disable CR0 WP (Write-Protection)original ↗
11 Dec 2019
Linux Rootkit for Fun and Profit - 0x03 - LKM - Hide from ss/netstatoriginal ↗
10 Dec 2019
Linux Rootkit for Fun and Profit - 0x02 - LKM - Hide files/procsoriginal ↗
5 Dec 2019
Linux Rootkit for Fun and Profit - 0x01 - LKMoriginal ↗
4 Dec 2019
Linux Rootkit for Fun and Profit - 0x00 - Designoriginal ↗
3 Dec 2019
CVE-2019-13272: Linux LPE via 'PTRACE_TRACEME'original ↗
22 Aug 2019
CVE-2019-12735: Vim/NeoVim modeline RCE漏洞分析original ↗
28 Jun 2019
CVE-2018-18955 - A Handy LPE for Newer Linux Kernelsoriginal ↗
23 Jan 2019

2018

An RCE Approach of CVE-2018-7750original ↗
6 Nov 2018
Write Better Linux Rootkitsoriginal ↗
31 Oct 2018
Enabling New PGP Keyoriginal ↗
18 Oct 2018
How To Run GUI Programs With sudo Under Waylandoriginal ↗
13 Aug 2018
Working in TMUXoriginal ↗
11 Aug 2018
Use Shadowsocks as Transparent Proxy (like GFW doesn't exist)original ↗
23 Jul 2018
To My Graduationoriginal ↗
14 Jul 2018

2017

Parsing Large XML With Gooriginal ↗
25 Nov 2017
How to Use Cisco Anyconnect VPN - Certificate based authenticationoriginal ↗
29 Oct 2017
如何使用Cisco Anyconnect VPN - 基于证书的认证original ↗
28 Oct 2017
MassExpConsle - User Guideoriginal ↗
31 May 2017
A Hacking Console - Rewrittenoriginal ↗
10 May 2017
A Hacking Console (Upgraded) - massExploitConsoleoriginal ↗
23 Apr 2017
A Hacking Consoleoriginal ↗
10 Mar 2017
极路由3 LEDE + Shadowsocks + Mentohust (含所需文件tarball下载)original ↗
20 Feb 2017

2016

Using KCPTUN to Speed Up Your Proxyoriginal ↗
30 Nov 2016
No Titleoriginal ↗
20 Nov 2016
Using Obfs4proxy to obfuscate your non-TOR proxy / 为Shadowsocks路由器增加Obfs4混淆original ↗
11 Oct 2016
搭建Cisco Anyconnect VPN服务器original ↗
5 Oct 2016
A reverse shell written in Golangoriginal ↗
1 Oct 2016
Switched to Xfce4 Desktoporiginal ↗
23 Sept 2016
使用Shadowsocks-Plus整合KCPTUN加速original ↗
25 Aug 2016
My First C-Sharp Projectoriginal ↗
24 Aug 2016
Cryptography - Week 1original ↗
16 Aug 2016
极路由hosts修改 (无行数限制)original ↗
3 Aug 2016
NetCat - File Transfer and Moreoriginal ↗
23 Jul 2016
极路由4使用Shadowsocks插件（含web配置面板）original ↗
15 Jul 2016
Secure Your Email with PGPoriginal ↗
3 Jun 2016
Using OCSERV On An HTTPS serveroriginal ↗
25 May 2016
Build Your Own Anyconnect VPNoriginal ↗
24 May 2016
Enabling HTTP2original ↗
24 May 2016
Sh4d0ws0cks Over Obfsproxy (Scramblesuit)original ↗
15 May 2016
Glowing Bearoriginal ↗
8 May 2016
A Tour Of Go - My First Step To Golangoriginal ↗
18 Apr 2016
使用Obfsproxy (Scramblesuit) 混淆sh4d0ws0cks流量original ↗
15 Apr 2016