I'm currently working for a Switzerland based cybersecurity company named PRODAFT. My main focus areas are reverse engineering, malware analysis, exploit development, threat intelligence, and red team adversarial attack simulation. I often share my design and implementation of exploits and tools that can be used in red-team engagements and offensive threat intelligence operations.

📓Blogs & Projects:

• https://pentest.blog
• https://qsocket.io

PinnedLoading

1. amberamberPublic

   Reflective PE packer.

   Go 1.3k 218

2. sgnsgnPublic

   Shikata ga nai (仕方がない) encoder ported into go with several improvements

   Go 1.7k 229

3. IAT_APIIAT_APIPublic

   Assembly block for finding and calling the windows API functions inside import address table(IAT) of the running PE file.

   Assembly 75 15

4. Hook_APIHook_APIPublic

   Assembly block for hooking windows API functions.

   Assembly 91 11

5. deoptimizerdeoptimizerPublic

   Evasion by machine code de-optimization.

   Rust 389 26

6. WSAAcceptBackdoorWSAAcceptBackdoorPublic

   Winsock accept() Backdoor Implant.

   C 115 23