>
Deep-dive writeups, vulnerability analysis, exploit development, red team tradecraft, and original security research from the NINJAS lab.
Hard-coded secrets are one of the easiest ways for sensitive credentials to accidentally enter a software repository. A developer adds an API key while testing a feature. Someone commits a database password to a configuration
Read Full Writeup →
What is BYOVD? BYOVD (Bring Your Own Vulnerable Driver) is a technique where an attacker abuses a legitimate, signed but vulnerable kernel-mode
Abolfazl
Static Application Security Testing (SAST) is an important part of modern application security. By analyzing source code before an application is deployed,
Inspector_Zia
Today we're going to talk about CVE-2026-32202, one of the most recent vulnerabilities — it is triggered simply by the victim
SH4Z0
A foundational guide for discovering Windows vulnerabilities, focusing on logic/AuthZ bugs, root-cause analysis, and responsible disclosure.
Security-Attack
Introduction Windows forensics is traditionally associated with incident response: examining a system after compromise, reconstructing attacker activity, and identifying artifacts left behind.
Arima
Introduction "C2 All the Things" project is where I researched and listed things an attacker could use as a communication
Arima
Introduction In this article I'll demonstrate how to show off your own thickness to the application by tearing apart the
Arima
PEB PEB stands for Process Enviornment Block and is a structure in Windows used to hold critical information about a process. It
Arima