BlahCats Blog

Published by hugsy , on 11 March 2018 , under research

I decided to give a descent test to the LIEF project. Executable parsers are not a new thing (pyelftools, pefile, etc…) but that one picked my curiosity (just like most Quarkslab projects) because it …

Published by hugsy , on 7 January 2018 , under tutorial

Introduction After releasing my QEMU images and then publishing a post on how to build a QEMU image for Debian MIPSel, I still received many demands for information on building more VMs, and among tho…

Published by hugsy , on 13 October 2017 , under ctf

This year, I happened to finally have a chance to be in a good position to play Flare-On CTF, a yearly CTF published by FireEye. This year’s edition offered 12 reverse-engineering challenges to solve …

Published by hugsy , on 31 August 2017 , under tutorial, research

Back again to modern Windows kernel exploitation! After understanding how to build shellcodes for Windows 64-bit and applying this knowledge on a trivial kernel stack overflow vulnerability we are rea…

Published by hugsy , on 18 August 2017 , under tutorial, research

Hi there ✋ This post is the third chapter of this series, where we dive into Windows kernel. The previous posts introduced respectively how to painlessly setup a Windows exploit lab, then how to creat…