Latest Solutions

Analyzing MS Office Macro Malware with Oletools
Analyzing MS Office Macro Malware with Oletools

9887f1e95b4e11825941bd207400d1cc1580a7d438969f6c8d8c656551d339e2

easy

struppigel • Jan 05, 2026 • On-Site Article

2
Read
Programmatically NOP the Current Selection in Ghidra

0b38ca277bbb042d43bd1f17c4e424e167020883526eb2527ba929b2f0990a8f

medium

larsborn • Jan 05, 2026 • Blog

Dissecting a fresh BlankGrabber sample
Dissecting a fresh BlankGrabber sample

94237eac80fd2a20880180cab19b94e8760f0d1f06715ff42a6f60aef84f4adf

medium

humpty_tony • Jan 04, 2026 • Blog

Config extraction of a cobalt strike beacon
Config extraction of a cobalt strike beacon

4109d17d439e425d24e9d11956adcc63ff8e24ccfffe21dd8c5431fe969d2783

medium

malcat • Jan 04, 2026 • Blog

Reversing a NSIS dropper using quick and dirty shellcode emulation
Reversing a NSIS dropper using quick and dirty shellcode emulation

291df8186e62df74b8fcf2c361c6913b9b73e3e864dde58eb63d5c3159a4c32d

medium

malcat • Jan 04, 2026 • Blog

Cutting corners against a Dridex downloader (part #2)
Cutting corners against a Dridex downloader (part #2)

277089cb78a9c493cecd8f5fbe70df0577d4f9557fb8b55ff5f7c2505308ca3a

advanced

malcat • Jan 04, 2026 • Blog