Blog

Writing mostly because I 'love' it

JavaScriptPythonRed TeamingAPTLazarus Group

When npm install Gets You Hacked: Simulating the Famous Chollima Job Scam Campaign

A red team simulation inspired by North Korean APT group Famous Chollima, demonstrating how malicious npm packages can be weaponized in fake job recruitment campaigns targeting developers.

Fri, Jul 11, 2025 • 2 min readRead→
JavaScriptPythonRed TeamingAPTLazarus Group

When npm install Gets You Hacked: Simulating the Famous Chollima Job Scam Campaign

A red team simulation inspired by North Korean APT group Famous Chollima, demonstrating how malicious npm packages can be weaponized in fake job recruitment campaigns targeting developers.

Fri, Jul 11, 2025 • 2 min readRead→
Social EngineeringPowerShellPhishingRed Teaming

FileFix: A Simple Social Engineering Trick That Launches PowerShell from the Browser

The goal of the FileFix attack is to get the victim to unknowingly execute a malicious command that looks like a regular file path.

Wed, Jun 25, 2025 • 2 min readRead→
WindowsRed TeamingPrivilege EscalationLateral Movement

How to Hijack a Windows System with Nothing but Built-in Tools

A realistic multi-stage attack demonstration using only built-in Windows tools, showcasing advanced red teaming techniques.

Thu, Mar 20, 2025 • 2 min readRead→
Red TeamingEvasionEDRMalware Development

Advanced Red Team Techniques: Evading Modern EDR Solutions

Exploring advanced techniques for evading enterprise detection and response systems in red team engagements.

Mon, Jan 20, 2025 • 1 min readRead→
PythonMalware AnalysisDevelopmentSecurity Tools

Building Custom Malware Analysis Tools with Python

A guide to building custom tools for malware analysis, from basic parsers to advanced analysis frameworks.

Wed, Jan 15, 2025 • 2 min readRead→

// All blog posts are for educational purposes only

// Use the knowledge responsibly and ethically