static-analysis

RE & Pwn

Ghidra for Reverse Engineering and Binary Triage

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Malware & C2

Anti-Debugging and Unpacking Malware Samples

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security

Secure Code Review: A Practical Methodology

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security

SAST vs DAST vs IAST: Strengths and Blind Spots

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Fuzzing Fundamentals with AFL++ and libFuzzer

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Mobile API OSINT

IoT Firmware Extraction and Analysis

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense

YARA Rules for Malware Hunting and Classification

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
RE & Pwn

Getting Started with Ghidra for Reverse Engineering and Malware Analysis

A practical introduction to Ghidra's CodeBrowser, decompiler, function graph, data types, and scripting for RE and malware work.
Malware & C2

Static Analysis of Windows PE Files: Headers, Imports, Strings, and capa

A practical walkthrough of statically triaging Windows PE files using pestudio, capa, and the CLI — plus blue-team detection.
Containers & DevSecOps

Infrastructure as Code Security: Hunting Bugs in Terraform with tfsec and Checkov

A practical guide to attacking and defending Terraform: state file secrets, drift, least privilege, and IaC scanning with tfsec and Checkov.
Mobile API OSINT

iOS Application Security Testing Fundamentals

A practical primer on assessing iOS apps: IPA extraction, keychain, plist analysis, and dynamic instrumentation with Frida and objection.