https://blahcat.github.io/ https://blahcat.github.io/2013-06-20-i-feel-lucky/ 2013-06-20T00:00:00Z https://blahcat.github.io/2013-12-23-read-write-process-memory-on-linux/ 2013-12-23T00:00:00Z https://blahcat.github.io/2016-03-07-bkpctf-2016-simple-calc-writeup/ 2016-03-07T22:51:04Z https://blahcat.github.io/2016-03-08-bkpctf-2016-complex-calc/ 2016-03-08T00:00:00Z https://blahcat.github.io/2016-03-14-0ctf-2016-warmup-write-up/ 2016-03-14T00:00:00Z https://blahcat.github.io/2016-03-22-bctf-16-ruin/ 2016-03-21T22:51:04Z https://blahcat.github.io/2016-03-28-volgactf-2016-web-of-science/ 2016-03-28T00:00:00Z https://blahcat.github.io/2016-04-01-hitb-teaser-2016-bakery/ 2016-04-01T00:00:00Z https://blahcat.github.io/2016-05-09-asis-ctf-2016-feap/ 2016-05-09T00:00:00Z https://blahcat.github.io/2016-05-23-defcon-ctf-2016-feedme/ 2016-05-23T00:00:00Z https://blahcat.github.io/2016-05-24-defcon-ctf-2016-heapfun4u/ 2016-05-24T00:00:00Z https://blahcat.github.io/2016-06-13-armpwn-challenge/ 2016-06-13T12:21:05Z https://blahcat.github.io/2016-08-27-ruxmon-16-making-gdb-great-again/ 2016-08-27T11:52:34Z https://blahcat.github.io/2016-09-06-twctf-2016-reverse-box-writeup/ 2016-09-06T00:00:00Z https://blahcat.github.io/2017-01-24-armpwn-redux-canary-reloaded/ 2017-01-24T00:00:00Z https://blahcat.github.io/2017-01-26-insomni-hack-ctf-2017-bender-safe/ 2017-01-26T00:00:00Z https://blahcat.github.io/2017-06-25-qemu-images-to-play-with/ 2017-06-25T00:00:00Z https://blahcat.github.io/2017-07-14-building-a-debian-stretch-qemu-image-for-mipsel/ 2017-07-14T00:00:00Z https://blahcat.github.io/2017-08-01-gef-at-black-hat-arsenal-us-2017/ 2017-08-01T00:00:00Z https://blahcat.github.io/2017-08-07-setting-up-a-windows-vm-lab-for-kernel-debugging/ 2017-08-07T00:00:00Z https://blahcat.github.io/2017-08-14-a-primer-to-windows-x64-shellcoding/ 2017-08-14T00:00:00Z https://blahcat.github.io/2017-08-18-first-exploit-in-windows-kernel-hevd/ 2017-08-18T00:00:00Z https://blahcat.github.io/2017-08-31-arbitrary-write-primitive-in-windows-kernel-hevd/ 2017-08-31T00:00:00Z https://blahcat.github.io/2017-10-13-flareon-4-writeups/ 2017-10-13T00:00:00Z https://blahcat.github.io/2018-01-07-building-a-debian-stretch-qemu-image-for-aarch64/ 2018-01-07T00:00:00Z https://blahcat.github.io/2018-03-11-fuzzing-arbitrary-functions-in-elf-binaries/ 2018-03-11T00:00:00Z https://blahcat.github.io/2018-11-02-some-time-travel-musings/ 2018-11-02T00:00:00Z https://blahcat.github.io/2018-12-02-quick-visualization-of-a-binary-file/ 2018-12-02T00:00:00Z https://blahcat.github.io/2018-12-30-goodbye-virtualbox-hello-hyper-v/ 2018-12-30T00:00:00Z https://blahcat.github.io/2019-01-30-playing-with-windows-root-directory-object/ 2019-01-30T00:00:00Z https://blahcat.github.io/2019-03-17-small-dumps-in-the-big-pool/ 2019-03-17T00:00:00Z https://blahcat.github.io/2020-03-09-unexpected-logic-bug-win32k/ 2020-03-09T00:00:00Z https://blahcat.github.io/2020-05-23-enumerating-process-from-kd/ 2020-05-23T00:00:00Z https://blahcat.github.io/2020-06-15-playing-with-self-reference-pml4-entry/ 2024-07-01T00:00:00Z https://blahcat.github.io/2020-12-29-cheap-sandboxing-with-appcontainers/ 2020-12-29T00:00:00Z https://blahcat.github.io/2021-01-10-browsing-registry-kernel-mode/ 2021-01-10T00:00:00Z https://blahcat.github.io/2022-07-14-setup-hyperv-kdcom/ 2022-07-14T00:00:00Z https://blahcat.github.io/2022-07-17-windbgx-workspaces/ 2022-07-17T00:00:00Z https://blahcat.github.io/2022-08-06-install-hyperv-sandbox-win10home/ 2022-08-06T00:00:00Z https://blahcat.github.io/2023-04-04-section-objects-kernel-user-communication-mode/ 2023-04-04T00:00:00Z https://blahcat.github.io/2024-01-27-tapping-into-the-potential-of-memory-dump-emulation/ 2024-03-26T00:00:00Z https://blahcat.github.io/about/ https://blahcat.github.io/authors/ https://blahcat.github.io/authors/hugsy/ https://blahcat.github.io/categories/ https://blahcat.github.io/categories/ctf/ https://blahcat.github.io/categories/ctf/page/1/ https://blahcat.github.io/categories/ctf/page/2/ https://blahcat.github.io/categories/minis/ https://blahcat.github.io/categories/minis/page/1/ https://blahcat.github.io/categories/misc/ https://blahcat.github.io/categories/misc/page/1/ https://blahcat.github.io/categories/research/ https://blahcat.github.io/categories/research/page/1/ https://blahcat.github.io/categories/research/page/2/ https://blahcat.github.io/categories/talk/ https://blahcat.github.io/categories/talk/page/1/ https://blahcat.github.io/categories/tutorial/ https://blahcat.github.io/categories/tutorial/page/1/ https://blahcat.github.io/notes/ https://blahcat.github.io/page/1/ https://blahcat.github.io/page/2/ https://blahcat.github.io/page/3/ https://blahcat.github.io/page/4/ https://blahcat.github.io/page/5/ https://blahcat.github.io/page/6/ https://blahcat.github.io/page/7/ https://blahcat.github.io/page/8/ https://blahcat.github.io/page/9/ https://blahcat.github.io/pages/ https://blahcat.github.io/qemu/ https://blahcat.github.io/series/ https://blahcat.github.io/tags/ https://blahcat.github.io/tags/0ctf-2016/ https://blahcat.github.io/tags/0ctf-2016/page/1/ https://blahcat.github.io/tags/1day/ https://blahcat.github.io/tags/1day/page/1/ https://blahcat.github.io/tags/aarch64/ https://blahcat.github.io/tags/aarch64/page/1/ https://blahcat.github.io/tags/appcontainer/ https://blahcat.github.io/tags/appcontainer/page/1/ https://blahcat.github.io/tags/arduino-avr/ https://blahcat.github.io/tags/arduino-avr/page/1/ https://blahcat.github.io/tags/arm/ https://blahcat.github.io/tags/arm/page/1/ https://blahcat.github.io/tags/arm64/ https://blahcat.github.io/tags/arm64/page/1/ https://blahcat.github.io/tags/armpwn/ https://blahcat.github.io/tags/armpwn/page/1/ https://blahcat.github.io/tags/arsenal/ https://blahcat.github.io/tags/arsenal/page/1/ https://blahcat.github.io/tags/asis-2016/ https://blahcat.github.io/tags/asis-2016/page/1/ https://blahcat.github.io/tags/backdoor/ https://blahcat.github.io/tags/backdoor/page/1/ https://blahcat.github.io/tags/bctf-2016/ https://blahcat.github.io/tags/bctf-2016/page/1/ https://blahcat.github.io/tags/binary-ninja/ https://blahcat.github.io/tags/binary-ninja/page/1/ https://blahcat.github.io/tags/binary/ https://blahcat.github.io/tags/binary/page/1/ https://blahcat.github.io/tags/bkpctf-2016/ https://blahcat.github.io/tags/bkpctf-2016/page/1/ https://blahcat.github.io/tags/blackhat/ https://blahcat.github.io/tags/blackhat/page/1/ https://blahcat.github.io/tags/bochs/ https://blahcat.github.io/tags/bochs/page/1/ https://blahcat.github.io/tags/bochscpu/ https://blahcat.github.io/tags/bochscpu/page/1/ https://blahcat.github.io/tags/brop/ https://blahcat.github.io/tags/brop/page/1/ https://blahcat.github.io/tags/bug-win32k/ https://blahcat.github.io/tags/bug-win32k/page/1/ https://blahcat.github.io/tags/cheatsheet/ https://blahcat.github.io/tags/cheatsheet/page/1/ https://blahcat.github.io/tags/cve-2018-6789/ https://blahcat.github.io/tags/cve-2018-6789/page/1/ https://blahcat.github.io/tags/debug/ https://blahcat.github.io/tags/debug/page/1/ https://blahcat.github.io/tags/debugging/ https://blahcat.github.io/tags/debugging/page/1/ https://blahcat.github.io/tags/defcon-2016/ https://blahcat.github.io/tags/defcon-2016/page/1/ https://blahcat.github.io/tags/elf/ https://blahcat.github.io/tags/elf/page/1/ https://blahcat.github.io/tags/emulation/ https://blahcat.github.io/tags/emulation/page/1/ https://blahcat.github.io/tags/exim/ https://blahcat.github.io/tags/exim/page/1/ https://blahcat.github.io/tags/flareon/ https://blahcat.github.io/tags/flareon/page/1/ https://blahcat.github.io/tags/format-string/ https://blahcat.github.io/tags/format-string/page/1/ https://blahcat.github.io/tags/freebsd/ https://blahcat.github.io/tags/freebsd/page/1/ https://blahcat.github.io/tags/fuzzing/ https://blahcat.github.io/tags/fuzzing/page/1/ https://blahcat.github.io/tags/gdb/ https://blahcat.github.io/tags/gdb/page/1/ https://blahcat.github.io/tags/gef/ https://blahcat.github.io/tags/gef/page/1/ https://blahcat.github.io/tags/heap-overflow/ https://blahcat.github.io/tags/heap-overflow/page/1/ https://blahcat.github.io/tags/heap/ https://blahcat.github.io/tags/heap/page/1/ https://blahcat.github.io/tags/hevd/ https://blahcat.github.io/tags/hevd/page/1/ https://blahcat.github.io/tags/hitb/ https://blahcat.github.io/tags/hitb/page/1/ https://blahcat.github.io/tags/howto/ https://blahcat.github.io/tags/howto/page/1/ https://blahcat.github.io/tags/hyper-v/ https://blahcat.github.io/tags/hyper-v/page/1/ https://blahcat.github.io/tags/hyperv/ https://blahcat.github.io/tags/hyperv/page/1/ https://blahcat.github.io/tags/ida/ https://blahcat.github.io/tags/ida/page/1/ https://blahcat.github.io/tags/insomnihack/ https://blahcat.github.io/tags/insomnihack/page/1/ https://blahcat.github.io/tags/javascript/ https://blahcat.github.io/tags/javascript/page/1/ https://blahcat.github.io/tags/js/ https://blahcat.github.io/tags/js/page/1/ https://blahcat.github.io/tags/kdcom/ https://blahcat.github.io/tags/kdcom/page/1/ https://blahcat.github.io/tags/kernel/ https://blahcat.github.io/tags/kernel/page/1/ https://blahcat.github.io/tags/kernel/page/2/ https://blahcat.github.io/tags/keystone/ https://blahcat.github.io/tags/keystone/page/1/ https://blahcat.github.io/tags/libfuzzer/ https://blahcat.github.io/tags/libfuzzer/page/1/ https://blahcat.github.io/tags/lief/ https://blahcat.github.io/tags/lief/page/1/ https://blahcat.github.io/tags/linux/ https://blahcat.github.io/tags/linux/page/1/ https://blahcat.github.io/tags/logic/ https://blahcat.github.io/tags/logic/page/1/ https://blahcat.github.io/tags/lpe/ https://blahcat.github.io/tags/lpe/page/1/ https://blahcat.github.io/tags/malware/ https://blahcat.github.io/tags/malware/page/1/ https://blahcat.github.io/tags/memory-dump/ https://blahcat.github.io/tags/memory-dump/page/1/ https://blahcat.github.io/tags/memory-manager/ https://blahcat.github.io/tags/memory-manager/page/1/ https://blahcat.github.io/tags/mips/ https://blahcat.github.io/tags/mips/page/1/ https://blahcat.github.io/tags/mips64el/ https://blahcat.github.io/tags/mips64el/page/1/ https://blahcat.github.io/tags/mipsel/ https://blahcat.github.io/tags/mipsel/page/1/ https://blahcat.github.io/tags/mmu/ https://blahcat.github.io/tags/mmu/page/1/ https://blahcat.github.io/tags/object-manager/ https://blahcat.github.io/tags/object-manager/page/1/ https://blahcat.github.io/tags/pe/ https://blahcat.github.io/tags/pe/page/1/ https://blahcat.github.io/tags/pool/ https://blahcat.github.io/tags/pool/page/1/ https://blahcat.github.io/tags/powerpc/ https://blahcat.github.io/tags/powerpc/page/1/ https://blahcat.github.io/tags/process/ https://blahcat.github.io/tags/process/page/1/ https://blahcat.github.io/tags/pwn/ https://blahcat.github.io/tags/pwn/page/1/ https://blahcat.github.io/tags/pwn/page/2/ https://blahcat.github.io/tags/pwntools/ https://blahcat.github.io/tags/pwntools/page/1/ https://blahcat.github.io/tags/python/ https://blahcat.github.io/tags/python/page/1/ https://blahcat.github.io/tags/qemu/ https://blahcat.github.io/tags/qemu/page/1/ https://blahcat.github.io/tags/registry/ https://blahcat.github.io/tags/registry/page/1/ https://blahcat.github.io/tags/reverse/ https://blahcat.github.io/tags/reverse/page/1/ https://blahcat.github.io/tags/rop/ https://blahcat.github.io/tags/rop/page/1/ https://blahcat.github.io/tags/ruxmon/ https://blahcat.github.io/tags/ruxmon/page/1/ https://blahcat.github.io/tags/rw-primitive/ https://blahcat.github.io/tags/rw-primitive/page/1/ https://blahcat.github.io/tags/sandbox/ https://blahcat.github.io/tags/sandbox/page/1/ https://blahcat.github.io/tags/seccomp/ https://blahcat.github.io/tags/seccomp/page/1/ https://blahcat.github.io/tags/section/ https://blahcat.github.io/tags/section/page/1/ https://blahcat.github.io/tags/shellcode/ https://blahcat.github.io/tags/shellcode/page/1/ https://blahcat.github.io/tags/sparc/ https://blahcat.github.io/tags/sparc/page/1/ https://blahcat.github.io/tags/ssp/ https://blahcat.github.io/tags/ssp/page/1/ https://blahcat.github.io/tags/stack-overflow/ https://blahcat.github.io/tags/stack-overflow/page/1/ https://blahcat.github.io/tags/token/ https://blahcat.github.io/tags/token/page/1/ https://blahcat.github.io/tags/ttd/ https://blahcat.github.io/tags/ttd/page/1/ https://blahcat.github.io/tags/twctf-2016/ https://blahcat.github.io/tags/twctf-2016/page/1/ https://blahcat.github.io/tags/unicorn-engine/ https://blahcat.github.io/tags/unicorn-engine/page/1/ https://blahcat.github.io/tags/virtualbox/ https://blahcat.github.io/tags/virtualbox/page/1/ https://blahcat.github.io/tags/visualization/ https://blahcat.github.io/tags/visualization/page/1/ https://blahcat.github.io/tags/volgactf-2016/ https://blahcat.github.io/tags/volgactf-2016/page/1/ https://blahcat.github.io/tags/windbg/ https://blahcat.github.io/tags/windbg/page/1/ https://blahcat.github.io/tags/windows/ https://blahcat.github.io/tags/windows/page/1/ https://blahcat.github.io/tags/windows/page/2/ https://blahcat.github.io/tags/write-what-where/ https://blahcat.github.io/tags/write-what-where/page/1/ https://blahcat.github.io/tags/wtf/ https://blahcat.github.io/tags/wtf/page/1/ https://blahcat.github.io/tags/x64/ https://blahcat.github.io/tags/x64/page/1/ https://blahcat.github.io/tags/x86/ https://blahcat.github.io/tags/x86/page/1/