malware-analysis

RE & Pwn

Ghidra for Reverse Engineering and Binary Triage

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Malware & C2

Anti-Debugging and Unpacking Malware Samples

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense

Memory Forensics with Volatility 3

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense

Deobfuscating Malicious PowerShell for Analysts

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense

YARA Rules for Malware Hunting and Classification

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Getting Started with Ghidra for Reverse Engineering and Malware Analysis

A practical introduction to Ghidra's CodeBrowser, decompiler, function graph, data types, and scripting for RE and malware work.
RE & Pwn

Reverse Engineering with radare2 and rizin: A Practical Walkthrough

A hands-on guide to static and visual binary reversing with radare2 and rizin, covering aaa, pdf, visual mode, and Cutter.
Malware & C2

Building a Malware Analysis Lab with REMnux and FLARE-VM

A practical guide to building an isolated REMnux + FLARE-VM lab with snapshots, INetSim, and FakeNet for safe malware analysis.
Malware & C2

Static Analysis of Windows PE Files: Headers, Imports, Strings, and capa

A practical walkthrough of statically triaging Windows PE files using pestudio, capa, and the CLI — plus blue-team detection.
Malware & C2

Dynamic Malware Analysis in a Sandbox: A Practical Behavioral Workflow

A hands-on guide to dynamic malware analysis with Procmon, Process Hacker, and Wireshark, plus Blue Team detection.
Malware & C2

Unpacking Packed Malware: From UPX to Custom Packers

A hands-on guide to manually unpacking UPX and custom packers using entropy, OEP detection, x64dbg, and Scylla import rebuild.
Malware & C2

Writing Effective YARA Detection Rules

A practical guide to writing precise YARA rules using strings, hex patterns, imphash, and conditions for malware detection.
Malware & C2

Dissecting Malicious Office Documents: VBA Macros, Stomping, and IOC Extraction

A hands-on guide to triaging malicious Office maldocs with oletools, defeating VBA stomping, and extracting IOCs.