Stack Unwind – Malware Research & Engineering

Sep 9, 20269 min read

What It Actually Takes to Import Data Into a Live Database

Multiple data providers, a domain specific taxonomy, and a rollback plan which caught me off-guard after the migration completed.

I Found the Live C2 Server Controlling Thousands of Infected Devices
Part 3 of the eChallan malware walkthrough series. Part 1 covered the dropper/loader. Part 2 covered the Flask C2 and the media player payload that wasn't one.
Jul 8, 202611 min read
The Media Player that wasn't
DEX Payload Analysis & C2 Infrastructure Mapping
Jun 26, 202616 min read
The Spam SMS that turned into a rabbit hole
I was supposed to be building an Android app, ended up taking one apart
Jun 24, 202615 min read
How I use AI in my Dev Workflow (without losing control)
How I Built Complex Systems with AI Without Becoming Dependent On It
Nov 28, 20258 min read
Building Poseidon #3: Control Plane vs Data Plane
How we ensured our system can survive a master node crash
Nov 10, 20257 min read
Building Poseidon #2: The Master-Worker Dance
Designing the gRPC API and Orchestration logic that powers ephemeral containers
Nov 3, 20258 min read