>
Deep-dive writeups, vulnerability analysis, exploit development, red team tradecraft, and original security research from the NINJAS lab.
PowerShell gives us quite a few ways to make HTTP requests. Depending on the PowerShell version, the installed .NET runtime, and the environment we are working with, one method may be more convenient than another.
Read Full Writeup →
Different Ways to Execute Commands in PowerShell A Red Team & Detection Engineering Reference PowerShell provides several different ways to execute code
HashtagAMIN
Hard-coded secrets are one of the easiest ways for sensitive credentials to accidentally enter a software repository. A developer adds an API
Inspector_Zia
What is BYOVD? BYOVD (Bring Your Own Vulnerable Driver) is a technique where an attacker abuses a legitimate, signed but vulnerable kernel-mode
Abolfazl
Static Application Security Testing (SAST) is an important part of modern application security. By analyzing source code before an application is deployed,
Inspector_Zia
Today we're going to talk about CVE-2026-32202, one of the most recent vulnerabilities — it is triggered simply by the victim
SH4Z0
A foundational guide for discovering Windows vulnerabilities, focusing on logic/AuthZ bugs, root-cause analysis, and responsible disclosure.
Security-Attack
Introduction Windows forensics is traditionally associated with incident response: examining a system after compromise, reconstructing attacker activity, and identifying artifacts left behind.
Arima
Introduction "C2 All the Things" project is where I researched and listed things an attacker could use as a communication
Arima
Introduction In this article I'll demonstrate how to show off your own thickness to the application by tearing apart the
Arima
PEB PEB stands for Process Enviornment Block and is a structure in Windows used to hold critical information about a process. It
Arima