corpus.blog
41554 blogs · [ { "id": "01a0d36e-6d65-70e5-b023-d29b21ca1bd0", "title": "Categories | klezVirus", "url": "https://klezvirus.github.io/categories/", "published_at": "2026-03-19T11:48:36+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b21fd534e", "title": "Tags | klezVirus", "url": "https://klezvirus.github.io/tags/", "published_at": "2026-03-19T11:48:36+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b22a2c361", "title": "Archives | klezVirus", "url": "https://klezvirus.github.io/archives/", "published_at": "2026-03-19T11:48:36+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b235e8a03", "title": "Projects | klezVirus", "url": "https://klezvirus.github.io/projects/", "published_at": "2026-03-19T11:48:36+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b2406171f", "title": "About | klezVirus", "url": "https://klezvirus.github.io/about/", "published_at": "2026-03-19T11:48:36+00:00" }, { "id": "01a08796-34ba-7152-bb84-2ca6fa818e21", "title": "Fantastic unwind information and where to find them", "url": "https://klezvirus.github.io/posts/Byoud/", "published_at": "2026-03-16T09:00:00+00:00" }, { "id": "01a08796-34ba-7152-bb84-2ca6fb1f4bc5", "title": "Callback hell: abusing callbacks, tail-calls, and proxy frames to obfuscate the stack", "url": "https://klezvirus.github.io/posts/Callback-Hell/", "published_at": "2025-12-21T22:00:00+00:00" }, { "id": "01a08796-34ba-7152-bb84-2ca6fc04599f", "title": "Malware Just Got Its Free Passes Back!", "url": "https://klezvirus.github.io/posts/Moonwalk-plus-plus/", "published_at": "2025-12-15T11:40:00+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1efe82ae", "title": "From Process Injection to Function Hijacking", "url": "https://klezvirus.github.io/posts/From-stomping-to-hijacking/", "published_at": "2025-08-06T10:00:24+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b17100a4a", "title": "HTB and Vulnhub: An OSWE Approach", "url": "https://klezvirus.github.io/posts/HTB-Vulnhub-Review/", "published_at": "2025-08-01T10:22:40+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1c7c3afc", "title": "AV Evasion - Born from a Chimera", "url": "https://klezvirus.github.io/posts/AV-Evasion-Chameleon/", "published_at": "2025-08-01T10:22:40+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1d2e7b96", "title": "The path to code execution in the era of EDR, Next-Gen AVs, and AMSI", "url": "https://klezvirus.github.io/posts/AV-Evasion-CodeExecNewDotnet/", "published_at": "2025-08-01T10:22:40+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1d655804", "title": "Migrating from P/Invoke to D/Invoke", "url": "https://klezvirus.github.io/posts/PInvoke2DInvoke/", "published_at": "2025-08-01T10:22:40+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1e56b956", "title": "Offensive Development - Implementing Shellcode Retrieval", "url": "https://klezvirus.github.io/posts/OffDev-ShellcodeRetrieval/", "published_at": "2025-08-01T10:22:40+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1eba54e8", "title": "SysWhispers is dead, long live SysWhispers!", "url": "https://klezvirus.github.io/posts/NoSysWhispers/", "published_at": "2025-08-01T10:22:40+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1eedf1a9", "title": "When re-inventing the wheel is the easiest way", "url": "https://klezvirus.github.io/posts/LDAPRelayScan/", "published_at": "2025-08-01T10:22:40+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1b9d543a", "title": "Active Directory: Lateral Movement via DCOM", "url": "https://klezvirus.github.io/posts/Lateral-Movement-DCOM/", "published_at": "2025-07-31T17:12:29+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1bf36352", "title": "Active Directory: Lateral Movement via PSRemoting", "url": "https://klezvirus.github.io/posts/Lateral-Movement-PSRemoting/", "published_at": "2025-07-31T17:12:29+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b18047d79", "title": "HTB and Vulnhub: Flick2 Walkthrough", "url": "https://klezvirus.github.io/posts/HTB-Vulnhub-flick2/", "published_at": "2025-07-31T17:03:06+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1891cf40", "title": "HTB and Vulnhub: Homeless Walkthrough", "url": "https://klezvirus.github.io/posts/HTB-Vulnhub-homeless/", "published_at": "2025-07-31T17:03:06+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b199c126c", "title": "HTB and Vulnhub: Raven2 Walkthrough", "url": "https://klezvirus.github.io/posts/HTB-Vulnhub-raven2/", "published_at": "2025-07-31T17:03:06+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1ad81918", "title": "Serialization - A Hidden Threat", "url": "https://klezvirus.github.io/posts/Serialization-A-hidden-threat/", "published_at": "2025-07-31T17:03:06+00:00" }, { "id": "01a08796-34ba-7152-bb84-2ca6fc289b4c", "title": "Welcome", "url": "https://klezvirus.github.io/posts/Welcome/", "published_at": "2025-07-31T15:30:00+00:00" }, { "id": "01a08796-34ba-7152-bb84-2ca6fc740483", "title": "SilentMoonwalk: Implementing a dynamic Call Stack Spoofer", "url": "https://klezvirus.github.io/posts/Stackmoonwalk/", "published_at": "2022-12-08T19:00:00+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1988ebbf", "title": "HTB and Vulnhub: Pipe Walkthrough", "url": "https://klezvirus.github.io/posts/HTB-Vulnhub-pipe/", "published_at": "2020-02-10T11:30:00+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b1a63c101", "title": "HTB and Vulnhub: Ted Walkthrough", "url": "https://klezvirus.github.io/posts/HTB-Vulnhub-ted/", "published_at": "2020-02-10T11:30:00+00:00" }, { "id": "01a0d36e-6d65-70e5-b023-d29b2423c9fa", "title": "klezVirus", "url": "https://klezvirus.github.io/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b245753e4", "title": null, "url": "https://klezvirus.github.io/tags/certifications/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2533b24f", "title": "offsec | klezVirus", "url": "https://klezvirus.github.io/tags/offsec/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b25fb77ec", "title": "web | klezVirus", "url": "https://klezvirus.github.io/tags/web/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2643402b", "title": "ctf | klezVirus", "url": "https://klezvirus.github.io/tags/ctf/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b270566af", "title": "exploitation | klezVirus", "url": "https://klezvirus.github.io/tags/exploitation/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b271ecb1d", "title": null, "url": "https://klezvirus.github.io/tags/ad/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b28104631", "title": "pentesting | klezVirus", "url": "https://klezvirus.github.io/tags/pentesting/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b28f1741b", "title": "red-teaming | klezVirus", "url": "https://klezvirus.github.io/tags/red-teaming/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b293dee06", "title": "lateral-movement | klezVirus", "url": "https://klezvirus.github.io/tags/lateral-movement/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2a00782a", "title": "dcom | klezVirus", "url": "https://klezvirus.github.io/tags/dcom/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2a6e8631", "title": "powershell | klezVirus", "url": "https://klezvirus.github.io/tags/powershell/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2aa634bb", "title": "obfuscation | klezVirus", "url": "https://klezvirus.github.io/tags/obfuscation/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2b9c2386", "title": null, "url": "https://klezvirus.github.io/tags/c/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2c28f275", "title": "csharp | klezVirus", "url": "https://klezvirus.github.io/tags/csharp/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2cb85fc7", "title": "evasion | klezVirus", "url": "https://klezvirus.github.io/tags/evasion/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2d124032", "title": "dinvoke | klezVirus", "url": "https://klezvirus.github.io/tags/dinvoke/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2dda3e07", "title": "shellcode | klezVirus", "url": "https://klezvirus.github.io/tags/shellcode/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2e3796a6", "title": "embedding | klezVirus", "url": "https://klezvirus.github.io/tags/embedding/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2ed57988", "title": "retrieval | klezVirus", "url": "https://klezvirus.github.io/tags/retrieval/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2f300df5", "title": "syswhispers | klezVirus", "url": "https://klezvirus.github.io/tags/syswhispers/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2f31b601", "title": "ldap | klezVirus", "url": "https://klezvirus.github.io/tags/ldap/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2f883b0c", "title": "scanner | klezVirus", "url": "https://klezvirus.github.io/tags/scanner/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b2fda2394", "title": "module-stomping | klezVirus", "url": "https://klezvirus.github.io/tags/module-stomping/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b30590b29", "title": "process-injection | klezVirus", "url": "https://klezvirus.github.io/tags/process-injection/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3123bc65", "title": "stack-spoofing | klezVirus", "url": "https://klezvirus.github.io/tags/stack-spoofing/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3154335a", "title": "welcome | klezVirus", "url": "https://klezvirus.github.io/tags/welcome/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3240a425", "title": null, "url": "https://klezvirus.github.io/tags/callbacks/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b32ba5d2a", "title": "tail-calls | klezVirus", "url": "https://klezvirus.github.io/tags/tail-calls/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3390b2e6", "title": "unwinding | klezVirus", "url": "https://klezvirus.github.io/tags/unwinding/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b339ab115", "title": "win64 | klezVirus", "url": "https://klezvirus.github.io/tags/win64/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3438c02d", "title": null, "url": "https://klezvirus.github.io/tags/cet/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b347e5bc1", "title": "hsp | klezVirus", "url": "https://klezvirus.github.io/tags/hsp/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b34ed1efc", "title": null, "url": "https://klezvirus.github.io/categories/web-exploitation/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b35d40d29", "title": null, "url": "https://klezvirus.github.io/categories/oswe/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3671fad7", "title": "Active Directory", "url": "https://klezvirus.github.io/categories/active-directory/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b375a5337", "title": null, "url": "https://klezvirus.github.io/categories/lateral-movement/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b37c26fe2", "title": null, "url": "https://klezvirus.github.io/categories/evasion/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b38428422", "title": null, "url": "https://klezvirus.github.io/categories/obfuscation/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b38c7fcf6", "title": null, "url": "https://klezvirus.github.io/categories/offensive-development/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b38edf218", "title": null, "url": "https://klezvirus.github.io/categories/windows/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b39159a7e", "title": null, "url": "https://klezvirus.github.io/categories/hooking-bypass/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b39685204", "title": null, "url": "https://klezvirus.github.io/categories/ldap/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b39f35925", "title": null, "url": "https://klezvirus.github.io/categories/design/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3a4e8d4a", "title": null, "url": "https://klezvirus.github.io/categories/stack-spoofing/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3b01bb79", "title": null, "url": "https://klezvirus.github.io/categories/personal/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3b43f5ce", "title": null, "url": "https://klezvirus.github.io/page2/", "published_at": null }, { "id": "01a0d36e-6d65-70e5-b023-d29b3c332a78", "title": null, "url": "https://klezvirus.github.io/page3/", "published_at": null } ] posts Claim your blog
Back to klezvirus.github.io
Blog · corpus.blog/blogs/klezvirus.github.io/posts

klezvirus.github.io

klezvirus.github.io

2026

Categories | klezVirusoriginal ↗
19 Mar 2026
Tags | klezVirusoriginal ↗
19 Mar 2026
Archives | klezVirusoriginal ↗
19 Mar 2026
Projects | klezVirusoriginal ↗
19 Mar 2026
About | klezVirusoriginal ↗
19 Mar 2026
Fantastic unwind information and where to find themoriginal ↗
16 Mar 2026

2025

Callback hell: abusing callbacks, tail-calls, and proxy frames to obfuscate the stackoriginal ↗
21 Dec 2025
Malware Just Got Its Free Passes Back!original ↗
15 Dec 2025
From Process Injection to Function Hijackingoriginal ↗
6 Aug 2025
HTB and Vulnhub: An OSWE Approachoriginal ↗
1 Aug 2025
AV Evasion - Born from a Chimeraoriginal ↗
1 Aug 2025
The path to code execution in the era of EDR, Next-Gen AVs, and AMSIoriginal ↗
1 Aug 2025
Migrating from P/Invoke to D/Invokeoriginal ↗
1 Aug 2025
Offensive Development - Implementing Shellcode Retrievaloriginal ↗
1 Aug 2025
SysWhispers is dead, long live SysWhispers!original ↗
1 Aug 2025
When re-inventing the wheel is the easiest wayoriginal ↗
1 Aug 2025
Active Directory: Lateral Movement via DCOMoriginal ↗
31 Jul 2025
Active Directory: Lateral Movement via PSRemotingoriginal ↗
31 Jul 2025
HTB and Vulnhub: Flick2 Walkthroughoriginal ↗
31 Jul 2025
HTB and Vulnhub: Homeless Walkthroughoriginal ↗
31 Jul 2025
HTB and Vulnhub: Raven2 Walkthroughoriginal ↗
31 Jul 2025
Serialization - A Hidden Threatoriginal ↗
31 Jul 2025
Welcomeoriginal ↗
31 Jul 2025

2022

SilentMoonwalk: Implementing a dynamic Call Stack Spooferoriginal ↗
8 Dec 2022

2020

HTB and Vulnhub: Pipe Walkthroughoriginal ↗
10 Feb 2020
HTB and Vulnhub: Ted Walkthroughoriginal ↗
10 Feb 2020

Undated

klezVirusoriginal ↗
—
https://klezvirus.github.io/tags/certifications/original ↗
—
offsec | klezVirusoriginal ↗
—
web | klezVirusoriginal ↗
—
ctf | klezVirusoriginal ↗
—
exploitation | klezVirusoriginal ↗
—
https://klezvirus.github.io/tags/ad/original ↗
—
pentesting | klezVirusoriginal ↗
—
red-teaming | klezVirusoriginal ↗
—
lateral-movement | klezVirusoriginal ↗
—
dcom | klezVirusoriginal ↗
—
powershell | klezVirusoriginal ↗
—
obfuscation | klezVirusoriginal ↗
—
https://klezvirus.github.io/tags/c/original ↗
—
csharp | klezVirusoriginal ↗
—
evasion | klezVirusoriginal ↗
—
dinvoke | klezVirusoriginal ↗
—
shellcode | klezVirusoriginal ↗
—
embedding | klezVirusoriginal ↗
—
retrieval | klezVirusoriginal ↗
—
syswhispers | klezVirusoriginal ↗
—
ldap | klezVirusoriginal ↗
—
scanner | klezVirusoriginal ↗
—
module-stomping | klezVirusoriginal ↗
—
process-injection | klezVirusoriginal ↗
—
stack-spoofing | klezVirusoriginal ↗
—
welcome | klezVirusoriginal ↗
—
https://klezvirus.github.io/tags/callbacks/original ↗
—
tail-calls | klezVirusoriginal ↗
—
unwinding | klezVirusoriginal ↗
—
win64 | klezVirusoriginal ↗
—
https://klezvirus.github.io/tags/cet/original ↗
—
hsp | klezVirusoriginal ↗
—
https://klezvirus.github.io/categories/web-exploitation/original ↗
—
https://klezvirus.github.io/categories/oswe/original ↗
—
Active Directoryoriginal ↗
—
https://klezvirus.github.io/categories/lateral-movement/original ↗
—
https://klezvirus.github.io/categories/evasion/original ↗
—
https://klezvirus.github.io/categories/obfuscation/original ↗
—
https://klezvirus.github.io/categories/offensive-development/original ↗
—
https://klezvirus.github.io/categories/windows/original ↗
—
https://klezvirus.github.io/categories/hooking-bypass/original ↗
—
https://klezvirus.github.io/categories/ldap/original ↗
—
https://klezvirus.github.io/categories/design/original ↗
—
https://klezvirus.github.io/categories/stack-spoofing/original ↗
—
https://klezvirus.github.io/categories/personal/original ↗
—
https://klezvirus.github.io/page2/original ↗
—
https://klezvirus.github.io/page3/original ↗
—