Nigerald's Blog

This is going to be an update to my previous blog post; to keep things brief, I have found a more consistent and evasive way to utilize syscalls. Hopefully you read my last blog post, as that contained a lot of relevant information. As for this blog post, two key... [Read More]

This is going to be a relatively short post as I don’t have much to say; the course and exam are great. I passed the course in about 2.5 of the 48 hours, and it took me a total of 6 hours to get all the flags. I really enjoyed... [Read More]

I’ve been digging a little deeper into .NET stuff recently (as anybody could tell with my recently blog posts), and I inevitably ended up looking at some more Windows internals. I now present, a modified implementation of SharpHellsGate. I decided to take a look at this because I liked Dinvoke... [Read More]

It’s been a month since my first part to this “series” and now I’m getting more familiarized with this stuff. Last post covered Platform Invoke (Pinvoke), Remote Process Injection, and Donut. This post will focus on taking these techniques to the next level with the following: Dynamic Invocation (Dinvoke) and... [Read More]

With all the Hack The Box boxes I’ve done, I’ve rarely ran into issues with Antivirus. Typically these boxes teach some sort of methodology or technique; therefore evasion is rarely implemented. However, evasion is an interesting concept; if your payload is signatured by AV and you cannot run it on... [Read More]