A Closer Look at macOS Package Installers World-writable scripts executed as root during Anaconda3 and Miniconda3 installs: CVE-2024-46060 and CVE-2024-46062. Dec 16, 2025 macOS
Certified AI/ML Pentester Review As organizations race to adopt the latest in artificial intelligence (AI), I was looking for a training that addressed AI’s unique attack surface and tested my skills in exploiting large language m... Oct 28, 2024 Walkthrough
Active Directory ACL Abuse with Kali Linux Active Directory Access Control Lists (ACL), and their associated Access Control Entries (ACE), define the entities and permissions of a specific AD object. If misconfigured, abusing these permissi... May 8, 2024 Windows
Hex Editing Pokemon Save Files for Unlimited Cash After creating a Batocera live USB for retro gaming, I instantly started down the path of game hacking and researching how ROM’s (digital game copies) could be abused… This post serves as my intro... Aug 10, 2023 Reversing
Decoding the Airwaves: Tracking Device Movements With WiFi One of the many rabbit holes I’ve gone down recently was the use of WiFi to track client devices. While this technique is not new by any means, I recall seeing matt0177’s 2022 Blackhat USA talk whe... Jun 30, 2023 Wireless
Portable Python for In-Memory Execution & Modern Evasion Forget compiling payloads and operating on disk — this post demonstrates the use of Python’s portable interpreter for in-memory malware deployment, even when the language isn’t installed on the hos... Dec 22, 2022 Windows