HACKINGISCOOL

Home
About

CVE-2024-35315-POC

Julian Horoszkiewicz

Jun 3, 2024

Next hop is nowhere - silencing EDRs with null routing

Intro On the 15th of October 2024 Trendmicro has published an article titled “Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions” (https://www.trendmicro.com/en_us/research/24/j/edrsilencer-disrupting-endpoint-security-solutions.html). It describes a tool used by red teams and adversaries to disrupt EDR solutions by cutting off their

Feb 4, 2025 9 min read

Flying under the radar with split processing

Intro In the beginning of my recent article -https://hackingiscool.pl/breaking-out-from-stripped-tokens-using-process-injection/- I mentioned that it laid out the groundwork for something I was about to publish soonish. This is it. The idea started roaming my mind back in 2019 when I began working as an incident responder. Then

Dec 9, 2024 10 min read

Slipping through the cracks - the imperfections and nuances of CVE

Introduction This is mostly dedicated to people working with vulnerabilities affecting commonly used software: vulnerability management teams, system administrators, red teams, incident responders, threat hunters, threat intelligence, bug hunters, security researchers and software vendors. To some extent, this subject has been bugging me for years, so eventually I decided to

Oct 24, 2024 13 min read

HACKINGISCOOL © 2025

Powered by Ghost

No one really cares about cookies and neither do I