4 posts
Writing
Technical deep-dives into offensive tooling, and the occasional reflection on learning this craft the hard way.
C2 Development from Scratch · Part 3
Borrowing from Internet Censorship Bypass Techniques: Adding VLESS, REALITY, and uTLS to C2 Egress
Exploring how anti-censorship protocols like REALITY, VLESS, and uTLS solve Layer 4 TLS fingerprinting (JA4) and active listener probing in Go implants, and examining the architectural boundaries where enterprise MITM proxies break them.
C2 Development from Scratch · Part 2
C2 Development from Scratch: Fixing Every IOC - Phase 2 Walkthrough
Taking a loud C2 framework and systematically closing every detection surface I documented in Part 1. Browser spoofing, AES-256-GCM, COM-based persistence, certificate pinning, and the engineering problems behind each fix.
C2 Development from Scratch · Part 1
C2 Development from Scratch: Phase 1 Teardown
A teardown of a Phase 1 Command and Control framework, its architecture, its engineering decisions, and every way a Blue Team would catch it.
The Moment I Realized I Was Memorizing Instead of Learning
This article is about what I learned failing an "Easy" HackTheBox machine. It is a self-reflection about how I fixed my way of thinking when approaching problems.