Hassan Hamadi
I'm a vulnerability analyst. I'm pushing towards offensive security. I try to keep what I do documented here.
Computer Science undergrad · working toward the CPTS · open to connect.
Selected work
All projects →Custom C2 Framework
A custom Command and Control research framework with a Python/Flask team server, cross-compiled Go agents, encrypted and authenticated tasking, pinned HTTPS, REALITY/VLESS/uTLS transport, durable result delivery, and extensive security and reliability hardening.
Out-of-Band Network Implant Project
My plans for a hardware implant that uses a Pi Zero 2 W and 4G LTE to build a covert C2 tunnel, bypassing perimeter firewalls completely. Everything here can and will probably be changed.
Writing
All writeups →HTB: Kobold
HackTheBoxWalkthrough of the HackTheBox Kobold machine.
Borrowing from Internet Censorship Bypass Techniques: Adding VLESS, REALITY, and uTLS to C2 Egress
WritingExploring how anti-censorship protocols like REALITY, VLESS, and uTLS solve Layer 4 TLS fingerprinting (JA4) and active listener probing in Go implants, and examining the architectural boundaries where enterprise MITM proxies break them.
HTB: Silentium
HackTheBoxWalkthrough of the HackTheBox Silentium machine.
C2 Development from Scratch: Fixing Every IOC - Phase 2 Walkthrough
WritingTaking a loud C2 framework and systematically closing every detection surface I documented in Part 1. Browser spoofing, AES-256-GCM, COM-based persistence, certificate pinning, and the engineering problems behind each fix.
C2 Development from Scratch: Phase 1 Teardown
WritingA teardown of a Phase 1 Command and Control framework, its architecture, its engineering decisions, and every way a Blue Team would catch it.
HTB: CCTV
HackTheBoxWalkthrough of the HackTheBox CCTV machine.
Now
- Working toward the CPTS, the HTB Certified Penetration Testing Specialist.
- Updating my C2 framework here and there, and getting started with the hardware implant.