GhouLSec
![[Mal Series #27] NSIS Packed Electron App](https://miro.medium.com/v2/resize:fill:80:53/1*f-a1t572Y59addgapt_2og.png)
![[Mal Series #27] NSIS Packed Electron App](https://miro.medium.com/v2/resize:fill:160:107/1*f-a1t572Y59addgapt_2og.png)
![[Misc Series #6] Windbg Remote Debugging](https://miro.medium.com/v2/resize:fill:80:53/1*eYNTUXSzniW2jiXxkX8eAw.png)
![[Misc Series #6] Windbg Remote Debugging](https://miro.medium.com/v2/resize:fill:160:107/1*eYNTUXSzniW2jiXxkX8eAw.png)
![[Misc Series #5] How Windows CMD and PowerShell Execute a File?](https://miro.medium.com/v2/resize:fill:80:53/1*PzQ55_5YH6KaZr1pqS8mIA.png)
![[Misc Series #5] How Windows CMD and PowerShell Execute a File?](https://miro.medium.com/v2/resize:fill:160:107/1*PzQ55_5YH6KaZr1pqS8mIA.png)
![[Misc Series #4] Forensics on EDRSilencer Events](https://miro.medium.com/v2/resize:fill:80:53/1*l2hM7VWSliaifyZOQld7tQ.png)
![[Misc Series #4] Forensics on EDRSilencer Events](https://miro.medium.com/v2/resize:fill:160:107/1*l2hM7VWSliaifyZOQld7tQ.png)
![[Mal Series #26] Quick Analysis on Maldoc in PDF](https://miro.medium.com/v2/resize:fill:80:53/1*TAq1z8k95lY7pme1-i0-yw.png)
![[Mal Series #26] Quick Analysis on Maldoc in PDF](https://miro.medium.com/v2/resize:fill:160:107/1*TAq1z8k95lY7pme1-i0-yw.png)
![[Misc Series #3] Vuln ProcExp 16.32](https://miro.medium.com/v2/resize:fill:80:53/1*jw1mMNVL88-yr7Y1JFz1Ew.png)
![[Misc Series #3] Vuln ProcExp 16.32](https://miro.medium.com/v2/resize:fill:160:107/1*jw1mMNVL88-yr7Y1JFz1Ew.png)
![[Mal Series #24] Qakbot BB12 DLL Analysis 2023](https://miro.medium.com/v2/resize:fill:80:53/1*R8MAZL5YZPhFlM_YAOILCA.png)
![[Mal Series #24] Qakbot BB12 DLL Analysis 2023](https://miro.medium.com/v2/resize:fill:160:107/1*R8MAZL5YZPhFlM_YAOILCA.png)
Mar 5, 2023
![[Misc Series #2] Debug trick with Image File Execution Options (IFEO)](https://miro.medium.com/v2/resize:fill:80:53/1*aXNQKgpDnd9etzxv5-4jUQ.png)
![[Misc Series #2] Debug trick with Image File Execution Options (IFEO)](https://miro.medium.com/v2/resize:fill:160:107/1*aXNQKgpDnd9etzxv5-4jUQ.png)
![[RedDev #5] Rundll32 COM Hijack executor in C++](https://miro.medium.com/v2/resize:fill:80:53/1*flHkJ3HPdexAMjRdlUe5mg.png)
![[RedDev #5] Rundll32 COM Hijack executor in C++](https://miro.medium.com/v2/resize:fill:160:107/1*flHkJ3HPdexAMjRdlUe5mg.png)
![[Vuln Series #1] CLFS Vulnerability Analysis](https://miro.medium.com/v2/resize:fill:80:53/1*VzlzNSnU6ztOP70hSc5bfA.png)
![[Vuln Series #1] CLFS Vulnerability Analysis](https://miro.medium.com/v2/resize:fill:160:107/1*VzlzNSnU6ztOP70hSc5bfA.png)
![[Mal Series #23] Malware Loader — Bumblebee](https://miro.medium.com/v2/resize:fill:80:53/1*0puGOKv9pBeNBpOmoKjHng.png)
![[Mal Series #23] Malware Loader — Bumblebee](https://miro.medium.com/v2/resize:fill:160:107/1*0puGOKv9pBeNBpOmoKjHng.png)
![[CTF Series #12] Mini Linux Forensics — MUS22](https://miro.medium.com/v2/resize:fill:80:53/1*Ext2Rcx1OpWpKDT2Zwn4Iw.png)
![[CTF Series #12] Mini Linux Forensics — MUS22](https://miro.medium.com/v2/resize:fill:160:107/1*Ext2Rcx1OpWpKDT2Zwn4Iw.png)
![[Mal Series #22] Weird Embedded PDF file](https://miro.medium.com/v2/resize:fill:80:53/1*M_a1PXXy6OEMSU1kQa-gRA.png)
![[Mal Series #22] Weird Embedded PDF file](https://miro.medium.com/v2/resize:fill:160:107/1*M_a1PXXy6OEMSU1kQa-gRA.png)
![[RedDev Series #4] Experimenting SysWhisper2 with LLVM Obfuscator](https://miro.medium.com/v2/resize:fill:80:53/1*4k4ox2BiIgmyie4g_nlVdg.png)
![[RedDev Series #4] Experimenting SysWhisper2 with LLVM Obfuscator](https://miro.medium.com/v2/resize:fill:160:107/1*4k4ox2BiIgmyie4g_nlVdg.png)
![[Mal Series #21] BazarLoader](https://miro.medium.com/v2/resize:fill:80:53/1*9GOAaudXbjRE_x-wAPiVcA.png)
![[Mal Series #21] BazarLoader](https://miro.medium.com/v2/resize:fill:160:107/1*9GOAaudXbjRE_x-wAPiVcA.png)
![[CTF Series #11] C# P/Invoke + Reflective load](https://miro.medium.com/v2/resize:fill:80:53/1*CgR8XHfxrf3UxdqyIxfMpA.png)
![[CTF Series #11] C# P/Invoke + Reflective load](https://miro.medium.com/v2/resize:fill:160:107/1*CgR8XHfxrf3UxdqyIxfMpA.png)
![[Mal Series #20] Android libarm_protect packer](https://miro.medium.com/v2/resize:fill:80:53/1*c9B7N8K6ANkc0TfI3BRbxQ.png)
![[Mal Series #20] Android libarm_protect packer](https://miro.medium.com/v2/resize:fill:160:107/1*c9B7N8K6ANkc0TfI3BRbxQ.png)
![[RedDev Series #3] Spawn Process From WMI In C++](https://miro.medium.com/v2/resize:fill:80:53/1*kCnNWKq8f10wv3WeAUyqUQ.png)
![[RedDev Series #3] Spawn Process From WMI In C++](https://miro.medium.com/v2/resize:fill:160:107/1*kCnNWKq8f10wv3WeAUyqUQ.png)
![[Mal Series#19] Trickbot shellcode analysis](https://miro.medium.com/v2/resize:fill:80:53/1*JQaf1CRv5RsGlGyVHrTL0g.png)
![[Mal Series#19] Trickbot shellcode analysis](https://miro.medium.com/v2/resize:fill:160:107/1*JQaf1CRv5RsGlGyVHrTL0g.png)
GhouLSec
Typical memes addict🐒from Malaysia. GitHub: https://github.com/ghoulgy 🍕Support my work: https://www.buymeacoffee.com/GhoulSec
Typical memes addict🐒from Malaysia. GitHub: https://github.com/ghoulgy 🍕Support my work: https://www.buymeacoffee.com/GhoulSec
