The Curious Engineer

All blogs / Security

cyber.wtf

cyber.wtf

SecurityReverse engineering

’16’17’18’19’20’21’22’23’24’25’26
Posts
59 from 2 Mar 2016 to 24 Aug 2026
Posting
now and then (5 in the last year)
Kind
company blog
Feed
https://cyber.wtf/feed.xml

2026 4

  1. E-Health Issues (3/3) - Severe Vulnerabilities in VITU
  2. E-Health Issues (2/3) - Severe Vulnerabilities in EMPOWER-TRANS*
  3. Python Object Introspection
  4. E-Health Issues (1/3) - Severe Vulnerabilities in SimplifyU

2025 6

  1. Rhadamanthys Loader Deobfuscation
  2. Running your own HashDB lookup
  3. I Know What You Shipped Last Summer - RCE, SQLi and More in Logistics Software e-TMS
  4. Notes on Pyarmor BCC Mode
  5. .NET Deobfuscation
  6. Unpacking Pyarmor v8+ scripts

2024 8

  1. Detection of Command and Control Traffic Using Suricata
  2. Harvesting the Database - 5 CVEs in TOPqw Webportal
  3. Destructive IoT Malware Emulation – Part 3 of 3 – Statistics
  4. Parsing Fortinet Binary Firewall Logs
  5. Destructive IoT Malware Emulation – Part 2 of 3 – Hooking Techniques
  6. Give Me Your FortiGate Configuration Backup and I Rule Your Network
  7. Destructive IoT Malware Emulation – Part 1 of 3 – Environment Setup
  8. Recovering data from broken appliance VMDKs

2023 4

  1. The csharp-streamer RAT
  2. Config Extraction from in-memory CobaltStrike Beacons
  3. QakBot Takedown Payload Analysis
  4. Defeating VMProtect's Latest Tricks

2022 3

  1. Windows Registry Analysis – Today's Episode: Tasks
  2. What the Pack(er)?
  3. A Chapter Closes

2021 1

  1. Guess who's back

2020 1

  1. Trickbot rdpscanDll – Transforming Candidate Credentials for Brute-Forcing RDP Servers

2019 1

  1. Using IDA Python to analyze Trickbot

2018 5

  1. Dissecting GandCrab Version 4.3
  2. One framework to build them all, one framework to name them, and in their IDBs to bind them
  3. Dissecting Olympic Destroyer – a walk-through
  4. In debt to Retpoline
  5. Behind the scenes of a bug collision

2017 11

  1. Emotet drops ZeuS Panda targeting German and Austrian online banking users
  2. Emotet harvests Microsoft Outlook
  3. DGA classification and detection for automated malware analysis
  4. Zeus Panda: Down To The Roots
  5. Negative Result: Reading Kernel Memory From User Mode
  6. Statistics and Infosec
  7. New cache architecture on Intel I9 and Skylake server: An initial assessment
  8. Zeus Panda Webinjects: Don't trust your eyes
  9. MASScan & the Problems of Static Detection of Microarchitectural attacks
  10. Security for Sale? – On Security Research Funding in Europe
  11. Zeus Panda Webinjects: a case study

2016 15

  1. The Kings In Your Castle Part 5: APT correlation and do-it-yourself threat research
  2. The Kings In Your Castle Part 4: Packers, Crypters and a Pack of RATs
  3. The Kings In Your Castle Part 3: Ssdeep being fuzzy while exploits are being scarce
  4. The Kings In Your Castle Part 2: Dataset and feature extraction
  5. Micro architecture attacks on KASLR
  6. The Kings In Your Castle Part 1
  7. Covert Shotgun
  8. Two covert channels
  9. BlackHoodie #2 – We roll again :)
  10. Row hammer the short summary
  11. Cache side channel attacks: CPU Design as a security problem
  12. BlackHoodie and what came after
  13. Presenting PeNet: a native .NET library for analyzing PE Headers with PowerShell
  14. G DATA ADAN at WKÖ eDay:16 in Vienna
  15. Cyber? WTF!