Security Blog

Cybersecurity research, vulnerability analysis, and practical security insights.

All Application Security Malware Analysis Network Security Pentest Scripts Security Research Security Tools Vulnerability Research
Security Research

Kingslayer - A supply chain attack -- Part 2

_ _ _ _ _____ | |__ | || | ___| | ___ __ ___ |___ / | '_ \| || |_ / __| |/ / '_ ` _ \ |_ \ | | | |__ _| (__| <-- BACK TO hackdog.me Kingslayer - A...

Jul 06, 2026 2 min read
Security Research

Kingslayer - A supply chain attack -- Part 1

_ _ _ _ _____ | |__ | || | ___| | ___ __ ___ |___ / | '_ \| || |_ / __| |/ / '_ ` _ \ |_ \ | | | |__ _| (__| <-- BACK TO hackdog.me Kingslayer - A...

Jul 06, 2026 4 min read
Security Research

网络设备中限制用户命令交互的逃逸

在实际渗透场景中，有很多网络设备我们拿到了root权限后ssh登陆发现有命令执行限制，这是因为ssh接口提供了一个特殊的受限制的命令外壳程序，类似busybox的感觉，他可以允许root用户对设备进行配置处理，但是不允许进行命令交互，所以相当于我们拿到的只是一个鸡肋的root用户，为了突破这种限制，我们有特别的姿势 因为开放了ssh服务，所以我们可以使用scp，但是scp是无法创建目录的，所以我...

Jul 06, 2026 1 min read
Security Research

IPCAM Hacking Part 3 - Camera Firmware Analysis

[+]redrain//**/ 汪汪汪 Home Embedded devices hacking --IPCAM...

Jul 06, 2026 1 min read
Security Research

IPCAM Hacking Part 2 - Advanced Camera Exploitation

[+]redrain//**/ 汪汪汪 Home Embedded devices hacking --IPCAM...

Jul 06, 2026 1 min read
Security Research

IPCAM Hacking Part 1 - Network Camera Exploitation

[+]redrain//**/ 汪汪汪 Home Embedded devices hacking --IPCAM...

Jul 06, 2026 1 min read
Malware Analysis

Crypto Miners Are Making Money With Your Money: How to Fight Them

The Rise of Cryptojacking Cryptojacking — the unauthorized use of someone else's computing resources to mine cryptocurrency — has exploded in popularity among cybercriminals. Unlike ransomware, which...

Jul 06, 2026 3 min read
Malware Analysis

Virtual Machine Introspection in Malware Analysis

What is Virtual Machine Introspection? Virtual Machine Introspection (VMI) is a technique that allows analysis of a virtual machine's state from the hypervisor level. Unlike traditional malware...

Jul 06, 2026 3 min read
Malware Analysis

Hide Malware Using Microsoft HTML Interpreters

Introduction Microsoft provides several HTML rendering engines and interpreters as part of the Windows operating system. Attackers have discovered that these legitimate tools can be weaponized to...

Jul 06, 2026 2 min read
Malware Analysis

Load and Inject Malicious DLL Using Microsoft Tools

Introduction Dynamic Link Library (DLL) injection is a technique used by attackers to execute malicious code within the address space of another process. What makes this technique particularly...

Jul 06, 2026 2 min read
Malware Analysis

BadRabbit Ransomware Analysis

Overview BadRabbit emerged on October 24, 2017, primarily targeting organizations in Russia, Ukraine, Turkey, and Germany. Unlike NotPetya's supply chain attack, BadRabbit relied on drive-by download...

Jul 06, 2026 2 min read
Malware Analysis

PowerShell: Malwares Can Use It Without PowerShell.exe

Overview PowerShell is one of the most powerful tools available on Windows systems. Unfortunately, it has also become one of the most popular tools for attackers. While many security solutions...

Jul 06, 2026 2 min read