41554 blogs · [ { "id": "01a087ba-7d36-706c-9fa8-8629e3da17b3", "title": "I Thought I Found a Prime Pattern That Breaks RSA", "url": "https://osandamalith.com/2026/07/17/i-thought-i-found-a-prime-pattern-that-breaks-rsa/?utm_source=rss&utm_medium=rss&utm_campaign=i-thought-i-found-a-prime-pattern-that-breaks-rsa", "published_at": "2026-07-17T11:24:57+00:00" }, { "id": "01a087ba-7d36-706c-9fa8-8629e471218c", "title": "Inside a TradingView Phishing Kill Chain: Dissecting a Self-Hosted ScreenConnect Phishing Campaign", "url": "https://osandamalith.com/2026/07/07/a-phishing-email-a-fake-trial-and-a-real-backdoor/?utm_source=rss&utm_medium=rss&utm_campaign=a-phishing-email-a-fake-trial-and-a-real-backdoor", "published_at": "2026-07-07T22:58:38+00:00" }, { "id": "01a087ba-7d36-706c-9fa8-8629e4b1b54a", "title": "RtlRegisterWait Shellcode Execution PoC", "url": "https://osandamalith.com/2025/10/18/rtlregisterwait-shellcode-execution-poc/?utm_source=rss&utm_medium=rss&utm_campaign=rtlregisterwait-shellcode-execution-poc", "published_at": "2025-10-18T20:03:17+00:00" }, { "id": "01a087ba-7d36-706c-9fa8-8629e4f542aa", "title": "Executing Shellcode with ReadDirectoryChanges’s Hidden Callback", "url": "https://osandamalith.com/2025/09/25/executing-shellcode-with-readdirectorychangess-hidden-callback/?utm_source=rss&utm_medium=rss&utm_campaign=executing-shellcode-with-readdirectorychangess-hidden-callback", "published_at": "2025-09-25T21:04:18+00:00" }, { "id": "01a087ba-7d36-706c-9fa8-8629e5c800cf", "title": "Encrypting Shellcode using SystemFunction032/033", "url": "https://osandamalith.com/2022/11/10/encrypting-shellcode-using-systemfunction032-033/?utm_source=rss&utm_medium=rss&utm_campaign=encrypting-shellcode-using-systemfunction032-033", "published_at": "2022-11-10T22:50:07+00:00" }, { "id": "01a087ba-7d36-706c-9fa8-8629e5e49170", "title": "Executing Shellcode via Callbacks", "url": "https://osandamalith.com/2021/04/01/executing-shellcode-via-callbacks/?utm_source=rss&utm_medium=rss&utm_campaign=executing-shellcode-via-callbacks", "published_at": "2021-04-01T00:27:16+00:00" }, { "id": "01a087ba-7d36-706c-9fa8-8629e65aaa3d", "title": "Hacking the World with HTML", "url": "https://osandamalith.com/2020/07/19/hacking-the-world-with-html/?utm_source=rss&utm_medium=rss&utm_campaign=hacking-the-world-with-html", "published_at": "2020-07-19T21:01:11+00:00" }, { "id": "01a087ba-7d36-706c-9fa8-8629e72ae019", "title": "Exploring the MS-DOS Stub", "url": "https://osandamalith.com/2020/07/19/exploring-the-ms-dos-stub/?utm_source=rss&utm_medium=rss&utm_campaign=exploring-the-ms-dos-stub", "published_at": "2020-07-19T16:23:46+00:00" }, { "id": "01a087ba-7d36-706c-9fa8-8629e756ba76", "title": "My Journey into eCXD – eLearnSecurity Certified eXploit Developer", "url": "https://osandamalith.com/2020/06/25/my-journey-into-ecxd-elearnsecurity-certified-exploit-developer/?utm_source=rss&utm_medium=rss&utm_campaign=my-journey-into-ecxd-elearnsecurity-certified-exploit-developer", "published_at": "2020-06-25T12:10:56+00:00" }, { "id": "01a087ba-7d36-706c-9fa8-8629e8378667", "title": "WMI 101 for Pentesters", "url": "https://osandamalith.com/2020/02/26/wmi-101-for-pentesters/?utm_source=rss&utm_medium=rss&utm_campaign=wmi-101-for-pentesters", "published_at": "2020-02-26T15:07:26+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17dc86e0a2", "title": "Alternatives to Extract Tables and Columns from MySQL and MariaDB", "url": "https://osandamalith.com/2020/01/27/alternatives-to-extract-tables-and-columns-from-mysql-and-mariadb/?utm_source=rss&utm_medium=rss&utm_campaign=alternatives-to-extract-tables-and-columns-from-mysql-and-mariadb", "published_at": "2020-01-27T22:48:31+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17dcde8173", "title": "Bypassing the WebARX Web Application Firewall (WAF)", "url": "https://osandamalith.com/2019/10/12/bypassing-the-webarx-web-application-firewall-waf/?utm_source=rss&utm_medium=rss&utm_campaign=bypassing-the-webarx-web-application-firewall-waf", "published_at": "2019-10-12T22:16:32+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17dd85755b", "title": "WQL Injection", "url": "https://osandamalith.com/2019/10/06/wql-injection/?utm_source=rss&utm_medium=rss&utm_campaign=wql-injection", "published_at": "2019-10-06T21:59:49+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17de4846f6", "title": "Unloading the Sysmon Minifilter Driver", "url": "https://osandamalith.com/2019/09/22/unloading-the-sysmon-minifilter-driver/?utm_source=rss&utm_medium=rss&utm_campaign=unloading-the-sysmon-minifilter-driver", "published_at": "2019-09-22T14:51:04+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17df0792f6", "title": "MiniDumpWriteDump via Faultrep!CreateMinidump", "url": "https://osandamalith.com/2019/09/08/minidumpwritedump-via-faultrepcreateminidump/?utm_source=rss&utm_medium=rss&utm_campaign=minidumpwritedump-via-faultrepcreateminidump", "published_at": "2019-09-08T21:18:18+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17df63f5f7", "title": "Running Shellcode Directly in C", "url": "https://osandamalith.com/2019/08/27/running-shellcode-directly-in-c/?utm_source=rss&utm_medium=rss&utm_campaign=running-shellcode-directly-in-c", "published_at": "2019-08-27T19:15:38+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17df711710", "title": "Converting an EXE to a DLL", "url": "https://osandamalith.com/2019/08/26/converting-an-exe-to-a-dll/?utm_source=rss&utm_medium=rss&utm_campaign=converting-an-exe-to-a-dll", "published_at": "2019-08-26T21:42:45+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17e02e1423", "title": "Random Compiler Experiments on Arrays", "url": "https://osandamalith.com/2019/06/16/random-compiler-experiments-on-arrays/?utm_source=rss&utm_medium=rss&utm_campaign=random-compiler-experiments-on-arrays", "published_at": "2019-06-16T18:09:41+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17e05d06a9", "title": "Analyzing an AutoHotKey Malware", "url": "https://osandamalith.com/2019/05/22/analyzing-an-autohotkey-malware/?utm_source=rss&utm_medium=rss&utm_campaign=analyzing-an-autohotkey-malware", "published_at": "2019-05-22T12:05:42+00:00" }, { "id": "01a0bdca-8387-70ad-8da3-6c17e1127d5c", "title": "Shellcode to Dump the Lsass Process", "url": "https://osandamalith.com/2019/05/11/shellcode-to-dump-the-lsass-process/?utm_source=rss&utm_medium=rss&utm_campaign=shellcode-to-dump-the-lsass-process", "published_at": "2019-05-11T13:36:48+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd52abe57", "title": "Determining Registry Keys of Group Policy Settings", "url": "https://osandamalith.com/2019/05/08/determining-registry-keys-of-group-policy-settings/?utm_source=rss&utm_medium=rss&utm_campaign=determining-registry-keys-of-group-policy-settings", "published_at": "2019-05-08T01:03:43+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd6004ae9", "title": "Linux Reverse Engineering CTFs for Beginners", "url": "https://osandamalith.com/2019/02/11/linux-reverse-engineering-ctfs-for-beginners/?utm_source=rss&utm_medium=rss&utm_campaign=linux-reverse-engineering-ctfs-for-beginners", "published_at": "2019-02-11T15:29:17+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd66d5a9f", "title": "eCPTX Passed !", "url": "https://osandamalith.com/2019/01/21/ecptx-passed/?utm_source=rss&utm_medium=rss&utm_campaign=ecptx-passed", "published_at": "2019-01-21T10:25:03+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd6e3c543", "title": "PE Sec Info – A Simple Tool to Manipulate ASLR and DEP Flags", "url": "https://osandamalith.com/2018/10/24/pe-sec-info-a-simple-tool-to-manipulate-aslr-and-dep-flags/?utm_source=rss&utm_medium=rss&utm_campaign=pe-sec-info-a-simple-tool-to-manipulate-aslr-and-dep-flags", "published_at": "2018-10-24T18:18:07+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd7c41747", "title": "EE 4GEE Mini Local Privilege Escalation Vulnerability (CVE-2018-14327)", "url": "https://osandamalith.com/2018/09/17/ee-4gee-mini-local-privilege-escalation-vulnerability-cve-2018-14327/?utm_source=rss&utm_medium=rss&utm_campaign=ee-4gee-mini-local-privilege-escalation-vulnerability-cve-2018-14327", "published_at": "2018-09-17T15:53:41+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd821c30e", "title": "Haxing Minesweeper", "url": "https://osandamalith.com/2018/04/07/haxing-minesweeper/?utm_source=rss&utm_medium=rss&utm_campaign=haxing-minesweeper", "published_at": "2018-04-07T17:38:26+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd85c0982", "title": "MySQL UDF Exploitation", "url": "https://osandamalith.com/2018/02/11/mysql-udf-exploitation/?utm_source=rss&utm_medium=rss&utm_campaign=mysql-udf-exploitation", "published_at": "2018-02-11T15:57:55+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd86215a2", "title": "Exploiting Format Strings in Windows", "url": "https://osandamalith.com/2018/02/01/exploiting-format-strings-in-windows/?utm_source=rss&utm_medium=rss&utm_campaign=exploiting-format-strings-in-windows", "published_at": "2018-02-01T09:25:26+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd8a9c949", "title": "Beagle – Find vulnerabilities in your websites easily", "url": "https://osandamalith.com/2018/01/10/beagle/?utm_source=rss&utm_medium=rss&utm_campaign=beagle", "published_at": "2018-01-10T00:38:58+00:00" }, { "id": "01a0bdd1-7fb6-72b3-9d53-57ccd9969caa", "title": "Detecting Architecture in Windows", "url": "https://osandamalith.com/2017/09/24/detecting-architecture-in-windows/?utm_source=rss&utm_medium=rss&utm_campaign=detecting-architecture-in-windows", "published_at": "2017-09-24T12:09:42+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-574362a19027", "title": "A Basic RSA Encrypter", "url": "https://osandamalith.com/2017/08/30/a-basic-rsa-encrypter/?utm_source=rss&utm_medium=rss&utm_campaign=a-basic-rsa-encrypter", "published_at": "2017-08-29T22:35:56+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-574363068b4b", "title": "eLearnSecurity Courses", "url": "https://osandamalith.com/2017/08/28/elearnsecurity-courses/?utm_source=rss&utm_medium=rss&utm_campaign=elearnsecurity-courses", "published_at": "2017-08-28T22:40:11+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-574363901ad7", "title": "Windows Kernel Exploitation – Null Pointer Dereference", "url": "https://osandamalith.com/2017/06/22/windows-kernel-exploitation-null-pointer-dereference/?utm_source=rss&utm_medium=rss&utm_campaign=windows-kernel-exploitation-null-pointer-dereference", "published_at": "2017-06-22T09:06:12+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-574364324fb5", "title": "Windows Kernel Exploitation – Arbitrary Overwrite", "url": "https://osandamalith.com/2017/06/14/windows-kernel-exploitation-arbitrary-overwrite/?utm_source=rss&utm_medium=rss&utm_campaign=windows-kernel-exploitation-arbitrary-overwrite", "published_at": "2017-06-14T13:35:33+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-574364d04a7e", "title": "APT attack in Bangladesh", "url": "https://osandamalith.com/2017/06/04/apt-attack-in-bangladesh/?utm_source=rss&utm_medium=rss&utm_campaign=apt-attack-in-bangladesh", "published_at": "2017-06-04T02:57:27+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-5743653bd014", "title": "Cryptculator", "url": "https://osandamalith.com/2017/05/29/cryptculator/?utm_source=rss&utm_medium=rss&utm_campaign=cryptculator", "published_at": "2017-05-29T11:57:07+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-5743654c461b", "title": "CMSMS 2.1.6 Multiple Vulnerabilities", "url": "https://osandamalith.com/2017/05/11/cmsms-2-1-6-multiple-vulnerabilities/?utm_source=rss&utm_medium=rss&utm_campaign=cmsms-2-1-6-multiple-vulnerabilities", "published_at": "2017-05-11T08:44:02+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-5743663b6be4", "title": "Lab 13-02 Analysis", "url": "https://osandamalith.com/2017/05/08/lab-13-02-analysis/?utm_source=rss&utm_medium=rss&utm_campaign=lab-13-02-analysis", "published_at": "2017-05-08T11:56:47+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-5743671a2ce8", "title": "A Simple API Monitor", "url": "https://osandamalith.com/2017/04/22/a-simple-api-monitor/?utm_source=rss&utm_medium=rss&utm_campaign=a-simple-api-monitor", "published_at": "2017-04-22T02:35:56+00:00" }, { "id": "01a0bdd5-3c4e-716f-abfd-5743674f41d2", "title": "Executing Shellcode Directly", "url": "https://osandamalith.com/2017/04/11/executing-shellcode-directly/?utm_source=rss&utm_medium=rss&utm_campaign=executing-shellcode-directly", "published_at": "2017-04-11T12:51:02+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb9176ab408", "title": "Windows Kernel Exploitation: Stack Overflow", "url": "https://osandamalith.com/2017/04/05/windows-kernel-exploitation-stack-overflow/?utm_source=rss&utm_medium=rss&utm_campaign=windows-kernel-exploitation-stack-overflow", "published_at": "2017-04-05T14:41:39+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb9179656b1", "title": "Places of Interest in Stealing NetNTLM Hashes", "url": "https://osandamalith.com/2017/03/24/places-of-interest-in-stealing-netntlm-hashes/?utm_source=rss&utm_medium=rss&utm_campaign=places-of-interest-in-stealing-netntlm-hashes", "published_at": "2017-03-24T09:24:43+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb91800f92e", "title": "Lab01-02 Analysis", "url": "https://osandamalith.com/2017/03/18/lab01-02-analysis/?utm_source=rss&utm_medium=rss&utm_campaign=lab01-02-analysis", "published_at": "2017-03-18T14:14:44+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb9183af246", "title": "MySQL Blind Injection in Insert and Update Statements", "url": "https://osandamalith.com/2017/03/13/mysql-blind-injection-in-insert-and-update-statements/?utm_source=rss&utm_medium=rss&utm_campaign=mysql-blind-injection-in-insert-and-update-statements", "published_at": "2017-03-13T10:27:59+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb91919624c", "title": "Lab01-01 Analysis", "url": "https://osandamalith.com/2017/03/06/lab01-01-analysis/?utm_source=rss&utm_medium=rss&utm_campaign=lab01-01-analysis", "published_at": "2017-03-06T14:16:33+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb919a4ab31", "title": "Shellcode to Scroll your Desktop Vertically and Horizontally", "url": "https://osandamalith.com/2017/03/02/shellcode-to-scroll-your-desktop-vertically-and-horizontally/?utm_source=rss&utm_medium=rss&utm_campaign=shellcode-to-scroll-your-desktop-vertically-and-horizontally", "published_at": "2017-03-02T10:37:44+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb919bb3335", "title": "Shellcode to Scroll Your Desktop Horizontally", "url": "https://osandamalith.com/2017/02/28/shellcode-to-scroll-your-desktop-horizontally/?utm_source=rss&utm_medium=rss&utm_campaign=shellcode-to-scroll-your-desktop-horizontally", "published_at": "2017-02-28T12:45:00+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb91a0c1361", "title": "Shellcode to Invert Colors", "url": "https://osandamalith.com/2017/02/28/shellcode-to-invert-colors/?utm_source=rss&utm_medium=rss&utm_campaign=shellcode-to-invert-colors", "published_at": "2017-02-28T08:01:52+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb91ab7777a", "title": "MySQL Injection in Update, Insert and Delete", "url": "https://osandamalith.com/2017/02/08/mysql-injection-in-update-insert-and-delete/?utm_source=rss&utm_medium=rss&utm_campaign=mysql-injection-in-update-insert-and-delete", "published_at": "2017-02-07T20:20:47+00:00" }, { "id": "01a0bdd8-8613-71b4-87a4-bdb91ac6e19e", "title": "MySQL Out-of-Band Hacking", "url": "https://osandamalith.com/2017/02/03/mysql-out-of-band-hacking/?utm_source=rss&utm_medium=rss&utm_campaign=mysql-out-of-band-hacking", "published_at": "2017-02-03T01:45:52+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c85125c40d", "title": "Alternative for Information_Schema.Tables in MySQL", "url": "https://osandamalith.com/2017/02/03/alternative-for-information_schema-tables-in-mysql/?utm_source=rss&utm_medium=rss&utm_campaign=alternative-for-information_schema-tables-in-mysql", "published_at": "2017-02-03T01:44:39+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c851dc2ac4", "title": "Patching Windows Media Player", "url": "https://osandamalith.com/2017/02/02/patching-windows-media-player/?utm_source=rss&utm_medium=rss&utm_campaign=patching-windows-media-player", "published_at": "2017-02-01T19:05:07+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c85262a47c", "title": "D-Link DIR-615 Open Redirection and XSS", "url": "https://osandamalith.com/2017/01/04/d-link-dir-615-open-redirection-and-xss/?utm_source=rss&utm_medium=rss&utm_campaign=d-link-dir-615-open-redirection-and-xss", "published_at": "2017-01-04T06:07:49+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c8529486a1", "title": "Random CrackMe", "url": "https://osandamalith.com/2017/01/04/random-crackme/?utm_source=rss&utm_medium=rss&utm_campaign=random-crackme", "published_at": "2017-01-04T03:45:27+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c853564c66", "title": "Journey into eWPTX", "url": "https://osandamalith.com/2016/12/29/journey-into-ewptx/?utm_source=rss&utm_medium=rss&utm_campaign=journey-into-ewptx", "published_at": "2016-12-29T07:44:16+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c8536fc59c", "title": "Data Packing", "url": "https://osandamalith.com/2016/12/12/data-packing/?utm_source=rss&utm_medium=rss&utm_campaign=data-packing", "published_at": "2016-12-12T15:36:48+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c85385c6e5", "title": "PHP Feature or 0day?", "url": "https://osandamalith.com/2016/12/11/php-feature-or-0day/?utm_source=rss&utm_medium=rss&utm_campaign=php-feature-or-0day", "published_at": "2016-12-11T15:15:50+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c853fca673", "title": "Passed eCRE!", "url": "https://osandamalith.com/2016/12/08/passed-ecre/?utm_source=rss&utm_medium=rss&utm_campaign=passed-ecre", "published_at": "2016-12-08T02:13:56+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c854f8410b", "title": "My Journey into eCPPT", "url": "https://osandamalith.com/2016/12/08/my-journey-into-ecppt/?utm_source=rss&utm_medium=rss&utm_campaign=my-journey-into-ecppt", "published_at": "2016-12-08T01:25:40+00:00" }, { "id": "01a0bddc-9f62-7252-b09a-e9c8551de254", "title": "String Length Function in NASM", "url": "https://osandamalith.com/2016/11/08/string-length-function-in-nasm/?utm_source=rss&utm_medium=rss&utm_campaign=string-length-function-in-nasm", "published_at": "2016-11-08T09:29:40+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde7d5a37d7", "title": "Assault Cube Trainer", "url": "https://osandamalith.com/2016/10/26/assault-cube-trainer/?utm_source=rss&utm_medium=rss&utm_campaign=assault-cube-trainer", "published_at": "2016-10-26T10:01:46+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde7da5dbeb", "title": "A Simple Web Crawler", "url": "https://osandamalith.com/2016/10/21/a-simple-web-crawler/?utm_source=rss&utm_medium=rss&utm_campaign=a-simple-web-crawler", "published_at": "2016-10-21T05:29:27+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde7e682be8", "title": "Freeze a Computer Using Ruby", "url": "https://osandamalith.com/2016/10/18/freeze-a-computer-using-ruby/?utm_source=rss&utm_medium=rss&utm_campaign=freeze-a-computer-using-ruby", "published_at": "2016-10-18T10:17:57+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde7f538536", "title": "Fun with SQLite Load_Extension", "url": "https://osandamalith.com/2016/10/10/fun-with-sqlite-load_extension/?utm_source=rss&utm_medium=rss&utm_campaign=fun-with-sqlite-load_extension", "published_at": "2016-10-10T10:12:37+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde7fb81e82", "title": "Content Spoofing on Infiniteskills", "url": "https://osandamalith.com/2016/09/23/content-spoofing-on-infiniteskills/?utm_source=rss&utm_medium=rss&utm_campaign=content-spoofing-on-infiniteskills", "published_at": "2016-09-23T07:34:54+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde80a539b0", "title": "Acknowledged by WSO2", "url": "https://osandamalith.com/2016/09/18/acknowledged-by-wso2/?utm_source=rss&utm_medium=rss&utm_campaign=acknowledged-by-wso2", "published_at": "2016-09-18T12:16:22+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde816db5f2", "title": "Acknowledged by Belkin", "url": "https://osandamalith.com/2016/08/22/acknowledged-by-belkin/?utm_source=rss&utm_medium=rss&utm_campaign=acknowledged-by-belkin", "published_at": "2016-08-22T07:06:07+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde81ba022b", "title": "Acknowledged by Avira", "url": "https://osandamalith.com/2016/08/07/acknowledged-by-avira-2/?utm_source=rss&utm_medium=rss&utm_campaign=acknowledged-by-avira-2", "published_at": "2016-08-07T13:30:32+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde82857d9c", "title": "Making your Shellcode Undetectable using .NET", "url": "https://osandamalith.com/2016/08/01/making-your-shellcode-undetectable-using-net/?utm_source=rss&utm_medium=rss&utm_campaign=making-your-shellcode-undetectable-using-net", "published_at": "2016-07-31T20:24:04+00:00" }, { "id": "01a0bddf-6128-7305-8c3e-cdde82a485d4", "title": "Bypassing IE and Edge XSS Filters with Double Encoding", "url": "https://osandamalith.com/2016/07/27/bypassing-ie-and-edge-xss-filters-with-double-encoding/?utm_source=rss&utm_medium=rss&utm_campaign=bypassing-ie-and-edge-xss-filters-with-double-encoding", "published_at": "2016-07-27T15:24:04+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783c9eb9d52b", "title": "Break This SQLi", "url": "https://osandamalith.com/2016/07/21/break-this-sqli/?utm_source=rss&utm_medium=rss&utm_campaign=break-this-sqli", "published_at": "2016-07-21T16:20:28+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783c9fa4e545", "title": "Satana Malware Analysis", "url": "https://osandamalith.com/2016/07/07/satana-malware/?utm_source=rss&utm_medium=rss&utm_campaign=satana-malware", "published_at": "2016-07-07T14:13:35+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783c9fecac6f", "title": "Storing a EXE inside MySQL", "url": "https://osandamalith.com/2016/06/24/storing-a-exe-inside-mysql/?utm_source=rss&utm_medium=rss&utm_campaign=storing-a-exe-inside-mysql", "published_at": "2016-06-24T12:32:26+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783ca0742515", "title": "Unofficial Way of Commenting in MySQL and MariaDB", "url": "https://osandamalith.com/2016/06/24/unofficial-way-of-commenting-in-mysql-and-mariadb/?utm_source=rss&utm_medium=rss&utm_campaign=unofficial-way-of-commenting-in-mysql-and-mariadb", "published_at": "2016-06-23T18:36:52+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783ca101eeee", "title": "Birthday Crackme Part 1", "url": "https://osandamalith.com/2016/06/14/birthday-crackme-part-1/?utm_source=rss&utm_medium=rss&utm_campaign=birthday-crackme-part-1", "published_at": "2016-06-14T04:43:21+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783ca1ad20b6", "title": "MySQL DoS in the Procedure Analyse Function – CVE-2015-4870", "url": "https://osandamalith.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-4870/?utm_source=rss&utm_medium=rss&utm_campaign=mysql-dos-in-the-procedure-analyse-function-cve-2015-4870", "published_at": "2016-05-29T04:31:03+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783ca2133427", "title": "Parent Process Detection", "url": "https://osandamalith.com/2016/05/28/parent-process-detection/?utm_source=rss&utm_medium=rss&utm_campaign=parent-process-detection", "published_at": "2016-05-28T14:36:38+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783ca2b6eac3", "title": "Dato Capital Hall of Fame", "url": "https://osandamalith.com/2016/05/27/dato-capital-hall-of-fame/?utm_source=rss&utm_medium=rss&utm_campaign=dato-capital-hall-of-fame", "published_at": "2016-05-27T13:46:55+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783ca2d31205", "title": "IP Obfuscator", "url": "https://osandamalith.com/2016/05/02/ip-obfuscator/?utm_source=rss&utm_medium=rss&utm_campaign=ip-obfuscator", "published_at": "2016-05-02T03:29:53+00:00" }, { "id": "01a0bde1-ed32-72af-bfc8-783ca3085145", "title": "Debugger Detection Using NtGlobalFlag", "url": "https://osandamalith.com/2016/04/23/debugger-detection-using-ntglobalflag/?utm_source=rss&utm_medium=rss&utm_campaign=debugger-detection-using-ntglobalflag", "published_at": "2016-04-23T05:21:00+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854b9dc2f76a", "title": "IsDebuggerPresent API", "url": "https://osandamalith.com/2016/03/08/isdebuggerpresent-api/?utm_source=rss&utm_medium=rss&utm_campaign=isdebuggerpresent-api", "published_at": "2016-03-08T14:38:35+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854b9de54eca", "title": "Reversing AutoIT Applications", "url": "https://osandamalith.com/2016/03/04/reversing-autoit-applications/?utm_source=rss&utm_medium=rss&utm_campaign=reversing-autoit-applications", "published_at": "2016-03-04T04:48:02+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854b9e0c4209", "title": "Magic Folder Hide", "url": "https://osandamalith.com/2016/03/01/magic-folder-hide/?utm_source=rss&utm_medium=rss&utm_campaign=magic-folder-hide", "published_at": "2016-03-01T11:20:49+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854b9e3a3642", "title": "My Journey into eWPT", "url": "https://osandamalith.com/2016/02/23/my-journey-into-ewpt/?utm_source=rss&utm_medium=rss&utm_campaign=my-journey-into-ewpt", "published_at": "2016-02-23T10:42:18+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854b9e47dbe5", "title": "Shellcode Extractor", "url": "https://osandamalith.com/2016/02/09/shellcode-extractor/?utm_source=rss&utm_medium=rss&utm_campaign=shellcode-extractor", "published_at": "2016-02-09T13:19:37+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854b9e9e3b1d", "title": "2014 Flare On Challenge 2", "url": "https://osandamalith.com/2016/02/03/2014-flare-on-challenge-2/?utm_source=rss&utm_medium=rss&utm_campaign=2014-flare-on-challenge-2", "published_at": "2016-02-03T04:08:56+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854b9f2cfe69", "title": "2014 Flare On Challenge 1", "url": "https://osandamalith.com/2016/02/03/2014-flare-on-challenge-1/?utm_source=rss&utm_medium=rss&utm_campaign=2014-flare-on-challenge-1", "published_at": "2016-02-03T03:48:20+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854b9fd0e2c3", "title": "Hiding Data Inside Memory Addresses", "url": "https://osandamalith.com/2016/01/02/hiding-data-inside-memory-addresses/?utm_source=rss&utm_medium=rss&utm_campaign=hiding-data-inside-memory-addresses", "published_at": "2016-01-02T18:08:42+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854ba080ce7c", "title": "2015 in review", "url": "https://osandamalith.com/2015/12/30/2015-in-review/?utm_source=rss&utm_medium=rss&utm_campaign=2015-in-review", "published_at": "2015-12-30T04:23:47+00:00" }, { "id": "01a0bde4-4ce2-7358-a844-854ba16cdb0b", "title": "Rootme No software breakpoints Cracking Challenge", "url": "https://osandamalith.com/2015/12/17/rootme-no-software-breakpoints-cracking-challenge/?utm_source=rss&utm_medium=rss&utm_campaign=rootme-no-software-breakpoints-cracking-challenge", "published_at": "2015-12-17T12:55:01+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65ca956f9", "title": "Pwning OpenDrive Users", "url": "https://osandamalith.com/2015/12/05/pwning-opendrive-users/?utm_source=rss&utm_medium=rss&utm_campaign=pwning-opendrive-users", "published_at": "2015-12-05T10:47:00+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65cf1ae54", "title": "Newbie Keygenning 1", "url": "https://osandamalith.com/2015/11/30/newbie-keygenning-1/?utm_source=rss&utm_medium=rss&utm_campaign=newbie-keygenning-1", "published_at": "2015-11-30T14:08:16+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65d855e51", "title": "Informatica Reflected XSS", "url": "https://osandamalith.com/2015/11/21/informatica-reflected-xss/?utm_source=rss&utm_medium=rss&utm_campaign=informatica-reflected-xss", "published_at": "2015-11-21T03:09:11+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65dd20f1b", "title": "Writing a Bootloader", "url": "https://osandamalith.com/2015/10/26/writing-a-bootloader/?utm_source=rss&utm_medium=rss&utm_campaign=writing-a-bootloader", "published_at": "2015-10-26T14:25:07+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65e114c14", "title": "How to Turn Your Switch into a Snitch", "url": "https://osandamalith.com/2015/10/11/how-to-turn-your-switch-into-a-snitch/?utm_source=rss&utm_medium=rss&utm_campaign=how-to-turn-your-switch-into-a-snitch", "published_at": "2015-10-11T13:33:19+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65e44dc8b", "title": "Solving Root-Me XORed Picture Challenge", "url": "https://osandamalith.com/2015/09/19/solving-root-me-xored-picture-challenge/?utm_source=rss&utm_medium=rss&utm_campaign=solving-root-me-xored-picture-challenge", "published_at": "2015-09-19T15:25:59+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65ea0fa4e", "title": "For the 2nd Time Acknowledged by Apple", "url": "https://osandamalith.com/2015/09/10/for-the-2nd-time-acknowledged-by-apple/?utm_source=rss&utm_medium=rss&utm_campaign=for-the-2nd-time-acknowledged-by-apple", "published_at": "2015-09-10T17:33:10+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65ef49dbd", "title": "Exe2Image", "url": "https://osandamalith.com/2015/08/23/exe2image/?utm_source=rss&utm_medium=rss&utm_campaign=exe2image", "published_at": "2015-08-23T13:51:58+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65f984e3c", "title": "Automated Blind SQL Injector", "url": "https://osandamalith.com/2015/08/05/automated-blind-sql-injector/?utm_source=rss&utm_medium=rss&utm_campaign=automated-blind-sql-injector", "published_at": "2015-08-05T07:06:21+00:00" }, { "id": "01a0bde6-cf35-738d-a71c-caf65fff6442", "title": "Error Based SQL Injection Using EXP", "url": "https://osandamalith.com/2015/07/15/error-based-sql-injection-using-exp/?utm_source=rss&utm_medium=rss&utm_campaign=error-based-sql-injection-using-exp", "published_at": "2015-07-15T14:34:07+00:00" } ] posts Claim your blog

Back to osandamalith.com

Blog · corpus.blog/blogs/osandamalith.com/posts

osandamalith.com

osandamalith.com

2026

I Thought I Found a Prime Pattern That Breaks RSA original ↗

17 Jul 2026

Inside a TradingView Phishing Kill Chain: Dissecting a Self-Hosted ScreenConnect Phishing Campaign original ↗

7 Jul 2026

2025

RtlRegisterWait Shellcode Execution PoC original ↗

18 Oct 2025

Executing Shellcode with ReadDirectoryChanges’s Hidden Callback original ↗

25 Sept 2025

2022

Encrypting Shellcode using SystemFunction032/033 original ↗

10 Nov 2022

2021

Executing Shellcode via Callbacks original ↗

1 Apr 2021

2020

Hacking the World with HTML original ↗

19 Jul 2020

Exploring the MS-DOS Stub original ↗

19 Jul 2020

My Journey into eCXD – eLearnSecurity Certified eXploit Developer original ↗

25 Jun 2020

WMI 101 for Pentesters original ↗

26 Feb 2020

Alternatives to Extract Tables and Columns from MySQL and MariaDB original ↗

27 Jan 2020

2019

Bypassing the WebARX Web Application Firewall (WAF)original ↗

12 Oct 2019

WQL Injection original ↗

6 Oct 2019

Unloading the Sysmon Minifilter Driver original ↗

22 Sept 2019

MiniDumpWriteDump via Faultrep!CreateMinidump original ↗

8 Sept 2019

Running Shellcode Directly in C original ↗

27 Aug 2019

Converting an EXE to a DLL original ↗

26 Aug 2019

Random Compiler Experiments on Arrays original ↗

16 Jun 2019

Analyzing an AutoHotKey Malware original ↗

22 May 2019

Shellcode to Dump the Lsass Process original ↗

11 May 2019

Determining Registry Keys of Group Policy Settings original ↗

8 May 2019

Linux Reverse Engineering CTFs for Beginners original ↗

11 Feb 2019

eCPTX Passed !original ↗

21 Jan 2019

2018

PE Sec Info – A Simple Tool to Manipulate ASLR and DEP Flags original ↗

24 Oct 2018

EE 4GEE Mini Local Privilege Escalation Vulnerability (CVE-2018-14327)original ↗

17 Sept 2018

Haxing Minesweeper original ↗

7 Apr 2018

MySQL UDF Exploitation original ↗

11 Feb 2018

Exploiting Format Strings in Windows original ↗

1 Feb 2018

Beagle – Find vulnerabilities in your websites easily original ↗

10 Jan 2018

2017

Detecting Architecture in Windows original ↗

24 Sept 2017

A Basic RSA Encrypter original ↗

29 Aug 2017

eLearnSecurity Courses original ↗

28 Aug 2017

Windows Kernel Exploitation – Null Pointer Dereference original ↗

22 Jun 2017

Windows Kernel Exploitation – Arbitrary Overwrite original ↗

14 Jun 2017

APT attack in Bangladesh original ↗

4 Jun 2017

Cryptculator original ↗

29 May 2017

CMSMS 2.1.6 Multiple Vulnerabilities original ↗

11 May 2017

Lab 13-02 Analysis original ↗

8 May 2017

A Simple API Monitor original ↗

22 Apr 2017

Executing Shellcode Directly original ↗

11 Apr 2017

Windows Kernel Exploitation: Stack Overflow original ↗

5 Apr 2017

Places of Interest in Stealing NetNTLM Hashes original ↗

24 Mar 2017

Lab01-02 Analysis original ↗

18 Mar 2017

MySQL Blind Injection in Insert and Update Statements original ↗

13 Mar 2017

Lab01-01 Analysis original ↗

6 Mar 2017

Shellcode to Scroll your Desktop Vertically and Horizontally original ↗

2 Mar 2017

Shellcode to Scroll Your Desktop Horizontally original ↗

28 Feb 2017

Shellcode to Invert Colors original ↗

28 Feb 2017

MySQL Injection in Update, Insert and Delete original ↗

7 Feb 2017

MySQL Out-of-Band Hacking original ↗

3 Feb 2017

Alternative for Information_Schema.Tables in MySQL original ↗

3 Feb 2017

Patching Windows Media Player original ↗

1 Feb 2017

D-Link DIR-615 Open Redirection and XSS original ↗

4 Jan 2017

Random CrackMe original ↗

4 Jan 2017

2016

Journey into eWPTX original ↗

29 Dec 2016

Data Packing original ↗

12 Dec 2016

PHP Feature or 0day?original ↗

11 Dec 2016

Passed eCRE!original ↗

8 Dec 2016

My Journey into eCPPT original ↗

8 Dec 2016

String Length Function in NASM original ↗

8 Nov 2016

Assault Cube Trainer original ↗

26 Oct 2016

A Simple Web Crawler original ↗

21 Oct 2016

Freeze a Computer Using Ruby original ↗

18 Oct 2016

Fun with SQLite Load_Extension original ↗

10 Oct 2016

Content Spoofing on Infiniteskills original ↗

23 Sept 2016

Acknowledged by WSO2 original ↗

18 Sept 2016

Acknowledged by Belkin original ↗

22 Aug 2016

Acknowledged by Avira original ↗

7 Aug 2016

Making your Shellcode Undetectable using .NET original ↗

31 Jul 2016

Bypassing IE and Edge XSS Filters with Double Encoding original ↗

27 Jul 2016

Break This SQLi original ↗

21 Jul 2016

Satana Malware Analysis original ↗

7 Jul 2016

Storing a EXE inside MySQL original ↗

24 Jun 2016

Unofficial Way of Commenting in MySQL and MariaDB original ↗

23 Jun 2016

Birthday Crackme Part 1 original ↗

14 Jun 2016

MySQL DoS in the Procedure Analyse Function – CVE-2015-4870 original ↗

29 May 2016

Parent Process Detection original ↗

28 May 2016

Dato Capital Hall of Fame original ↗

27 May 2016

IP Obfuscator original ↗

2 May 2016

Debugger Detection Using NtGlobalFlag original ↗

23 Apr 2016

IsDebuggerPresent API original ↗

8 Mar 2016

Reversing AutoIT Applications original ↗

4 Mar 2016

Magic Folder Hide original ↗

1 Mar 2016

My Journey into eWPT original ↗

23 Feb 2016

Shellcode Extractor original ↗

9 Feb 2016

2014 Flare On Challenge 2 original ↗

3 Feb 2016

2014 Flare On Challenge 1 original ↗

3 Feb 2016

Hiding Data Inside Memory Addresses original ↗

2 Jan 2016

2015

2015 in review original ↗

30 Dec 2015

Rootme No software breakpoints Cracking Challenge original ↗

17 Dec 2015

Pwning OpenDrive Users original ↗

5 Dec 2015

Newbie Keygenning 1 original ↗

30 Nov 2015

Informatica Reflected XSS original ↗

21 Nov 2015

Writing a Bootloader original ↗

26 Oct 2015

How to Turn Your Switch into a Snitch original ↗

11 Oct 2015

Solving Root-Me XORed Picture Challenge original ↗

19 Sept 2015

For the 2nd Time Acknowledged by Apple original ↗

10 Sept 2015

Exe2Image original ↗

23 Aug 2015

Automated Blind SQL Injector original ↗

5 Aug 2015

Error Based SQL Injection Using EXP original ↗

15 Jul 2015