The Curious Engineer

All blogs / Security

Adepts of 0xCC

adepts.of0x.cc

A brotherhood of owls praying to the debugger God.@AdeptsOf0xCC

SecurityReverse engineeringWindows internalsPHP

’20’21’22’23’24’25’26
Posts
27 from 4 Oct 2020 to 28 Sep 2026
Posting
now and then (2 in the last year)
Kind
personal blog
Feed
https://adepts.of0x.cc/feed.xml

2026 2

  1. A story of wifi secrets, UART lockdowns and a damaged flash memory chip
  2. From your doorbell to your home network

2024 4

  1. Mixing watering hole attacks with history leak via CSS
  2. VBA: overwriting R/W/X memory in a reliable way
  3. A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)
  4. VBA: having fun with macros, overwritten pointers & R/W/X memory

2023 3

  1. Developers are juicy targets: DCOM & Visual Studio
  2. VBA: resolving exports in runtime without NtQueryInformationProcess or GetProcAddress
  3. Beating an old PHP source code protector

2022 3

  1. Spice up your persistence: loading PHP extensions from memory
  2. Thoughts on the use of noVNC for phishing campaigns |
  3. In the land of PHP you will always be (use-after-)free |

2021 10

  1. Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273) |
  2. Adding a native sniffer to your implants: decomposing and recomposing PktMon |
  3. Knock! Knock! The postman is here! (abusing Mailslots and PortKnocking for connectionless shells) |
  4. Don't use commands, use code: the tale of Netsh & PortProxy |
  5. From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) |
  6. A physical graffiti of LSASS: getting credentials from physical memory for fun and learning |
  7. One thousand and one ways to copy your shellcode to memory (VBA Macros) |
  8. Hooks-On Hoot-Off: Vitaminizing MiniDump |
  9. The Kerberos Credential Thievery Compendium (GNU/Linux) |
  10. Hijacking connections without injections: a ShadowMoving approach to the art of pivoting |

2020 5

  1. The worst of the two worlds: Excel meets Outlook |
  2. Shedding light on creating VBA macros |
  3. Hacking in an epistolary way: implementing kerberoast in pure VBA |
  4. Remote Command Execution in Ruckus IoT Controller (CVE-2020-26878 & CVE-2020-26879) |
  5. A brief encounter with Leostream Connect Broker |