Stack Unwind – Malware Research & Engineering

The Three Ways

Aug 25, 20267 min read

Caught in the Reeloop

Aug 12, 202619 min read

What It Actually Takes to Import Data Into a Live Database

Multiple data providers, a domain specific taxonomy, and a rollback plan which caught me off-guard after the migration completed.

Sep 9, 20269 min read

Sealed with a KYSS: Inside an Android Banking RAT

Jul 22, 202612 min read

The Attacker's Discipline

Jul 14, 20267 min read

I Found the Live C2 Server Controlling Thousands of Infected Devices

Part 3 of the eChallan malware walkthrough series. Part 1 covered the dropper/loader. Part 2 covered the Flask C2 and the media player payload that wasn't one.

Jul 8, 202611 min read

The Media Player that wasn't

DEX Payload Analysis & C2 Infrastructure Mapping

Jun 26, 202616 min read

The Spam SMS that turned into a rabbit hole

I was supposed to be building an Android app, ended up taking one apart

Jun 24, 202615 min read

How I use AI in my Dev Workflow (without losing control)

How I Built Complex Systems with AI Without Becoming Dependent On It

Nov 28, 20258 min read

Building Poseidon #3: Control Plane vs Data Plane

How we ensured our system can survive a master node crash

Nov 10, 20257 min read

Building Poseidon #2: The Master-Worker Dance

Designing the gRPC API and Orchestration logic that powers ephemeral containers

Nov 3, 20258 min read

Command Palette

Latest articles