Blog: Write-ups, Research & More

Unsolicited Traffic - Observations from a Distributed Canary Network

description: A global view into unsolicited internet traffic, collected from a distributed network of honeypots and aggregated for analysis. This series explores attacker behavior across regions, highlights emerging patterns, and turns raw telemetry into actionable threat intelligence, with supporting data made available to researchers.

tags: Threat-Intel, Linux, Oaks-Internet-Safari

date: 2026-06-07

author: OakAtsume

Yesterday's Router, Today's Pivot!

description: Hunting Residential Threats and Fighting Automated Botnets

tags: Threat-Intel, Linux, Oaks-Internet-Safari

date: 2025-05-29

author: OakAtsume

Stupid bash tricks- command substitution, command injection, and the bash command prompt

description: It turns out you can use special characters in linux names. What could possibly go wrong?

tags: linux, shell, bash, command injection, parsing, langsec

date: 2025-01-28

author: MalcolmS

Writing research posts

description: This guide will go over all the details and steps required to post a research article.

tags: How to, Tutorial

date: 2021-11-03

author: Pips

Quirks in the Windows IPv6 address parsing and printing APIs

description: Half of the world still lacks Internet access, but there are no IPv4 addresses left to hand out - which means that software libraries for IPv6 deserve scrutiny now.

tags: research, WINDOWS API, IPv6

date: 2020-12-04

author: Alex Henrie

DLL injection - Developing a simple injector.

tags: how to, DLL Injection, Windows Hacking, Development, memory, Windows API

date: 2019-02-07

author: th3v0id

Exploiting a Stack Buffer Overflow (ret2libc method)

tags: research, memory, how to, buffer overflow

date: 2019-01-18

author: th3v0id

i didn't hack my christmas tree lights

tags: research, networking, IOT

date: 2018-12-27

author: kimb3r

How I accidentally became a domain broker

tags: Story, domains

date: 2018-12-20

author: Pips

A 9-step recipe to crack a NTLMv2 Hash from a freshly acquired .pcap

tags: how to, pcap

date: 2018-12-18

author: kimb3r

"Makefiles, but in English: Part 1"

description: Make is intelligent enough to be able to distinguish between them at runtime. But it's probably best to avoid storing different types in a variable.

tags: how to, Makefile

date: 2018-12-13

author: David Freitag

"Biohacking: New VivoKey Spark Implant"

tags: biohacking, RFID

date: 2018-12-12

author: Pips

An easier SaltLAN

description: My family does an annual LAN Party and one of the biggest complaints we have is that Steam takes ages to download for everyone.

tags: how to, tutorial, networking, gaming, Docker, Steam, DNS

date: 2018-11-28

author: bashNinja

Reverse engineering a 4 layer PCB, the slow and destructive way

description: Excitement! There was a sketchy padded envelope in the mail today. Where do we go next?

tags: EE, RE

date: 2018-11-16

author: David Freitag

Phishing/Scam campaign research (ep. 2)

description: I got another email. This one was interesting, the email was the standard "we had a rat on your computer that we used to take dirty pictures of you, give us money or we will send it to all your contacts".

tags: research, phishing

date: 2018-10-31

author: Pips

ASCII art in hidden places

description: Hiding data in new and interesting places has always been a fun objective for anyone who likes creating and solving challenges. One of the interesting secret hiding places for data I like to use is server headers.

tags: research, how to

date: 2018-10-31

author: Pips

Phishing/Scam campaign research

description: An email came in that an end user thought was suspicious. The end user passed it up to one of our team members, who then passed it up to me.

tags: research, phishing

date: 2018-10-27

author: Pips

Access-control exploitation (part 1)

description: One job I was tasked with was getting a fingerprint-based reader tested and operational for demoing our new level of hardware support for more secure facilities, 2 factor physical access control; something you are (fingerprint) and something you know or have. (pin/card)

tags: research, RFID

date: 2018-10-25

author: Pips