<feed xmlns="http://www.w3.org/2005/Atom"> <id>https://shellpecker.github.io//</id><title>Shellpecker's blog</title><subtitle>A blog about red team research</subtitle> <updated>2025-04-16T16:48:43+02:00</updated> <author> <name>shellpecker</name> <uri>https://shellpecker.github.io//</uri> </author><link rel="self" type="application/atom+xml" href="https://shellpecker.github.io//feed.xml"/><link rel="alternate" type="text/html" hreflang="en" href="https://shellpecker.github.io//"/> <generator uri="https://jekyllrb.com/" version="4.4.1">Jekyll</generator> <rights> © 2025 shellpecker </rights> <icon>/assets/img/favicons/favicon.ico</icon> <logo>/assets/img/favicons/favicon-96x96.png</logo> <entry><title>OSEE - Part 2 - Steal System Token using WinDbg</title><link href="https://shellpecker.github.io//posts/steal_system_token_windbg/" rel="alternate" type="text/html" title="OSEE - Part 2 - Steal System Token using WinDbg" /><published>2025-04-16T00:00:00+02:00</published> <updated>2025-04-16T00:00:00+02:00</updated> <id>https://shellpecker.github.io//posts/steal_system_token_windbg/</id> <content type="text/html" src="https://shellpecker.github.io//posts/steal_system_token_windbg/" /> <author> <name>shellpecker</name> </author> <category term="OSEE" /> <category term="Exploit Development" /> <summary>Introduction The purpose of this post is to show you who token manipulation (or stealing, call it whatever you want) concerning kernel exploitaion works. Before we deep dive into the real exploitation of drivers I think it is a good idea to understand how the theory of certain local privilege escalations work. In this case I want to demonstrate the idea of replacing the token of the system proc...</summary> </entry> <entry><title>Writing Windows Assembly and Shellcode (x64) - Part 1</title><link href="https://shellpecker.github.io//posts/x64_shellcode_1/" rel="alternate" type="text/html" title="Writing Windows Assembly and Shellcode (x64) - Part 1" /><published>2025-04-13T00:00:00+02:00</published> <updated>2025-04-14T01:05:21+02:00</updated> <id>https://shellpecker.github.io//posts/x64_shellcode_1/</id> <content type="text/html" src="https://shellpecker.github.io//posts/x64_shellcode_1/" /> <author> <name>shellpecker</name> </author> <category term="OSEE" /> <category term="Exploit Development" /> <category term="Assembly" /> <category term="Shellcode" /> <summary>Foreword In this series, I’ll be diving into the fundamentals of shellcode development on x64 Windows systems. While researching this challenging topic, I discovered several excellent resources that offer unique insights and different perspectives. Depending on your preferred learning style, one of the following articles might resonate with you better: x64 Assembly and Shellcoding 101 Wind...</summary> </entry> <entry><title>OSEE - Part 1 - Setting up Debugging Environment</title><link href="https://shellpecker.github.io//posts/OSEE_1/" rel="alternate" type="text/html" title="OSEE - Part 1 - Setting up Debugging Environment" /><published>2025-04-07T00:00:00+02:00</published> <updated>2025-04-08T00:13:53+02:00</updated> <id>https://shellpecker.github.io//posts/OSEE_1/</id> <content type="text/html" src="https://shellpecker.github.io//posts/OSEE_1/" /> <author> <name>shellpecker</name> </author> <category term="OSEE" /> <category term="Exploit Development" /> <summary>Introduction After conquering the OSCE3 certification, I’m now setting my sights on the final piece of my journey: the OSEE certification. In tandem with my preparations for Offensive Security’s Advanced Windows Exploitation course, I’ve begun exploring the fascinating realm of Windows kernel exploitation. Recently, I’ve deepened my skills in kernel debugging and familiarized myself with the fu...</summary> </entry> <entry><title>Blog Recommendations</title><link href="https://shellpecker.github.io//posts/BlogRecommendations/" rel="alternate" type="text/html" title="Blog Recommendations" /><published>2024-10-01T00:00:00+02:00</published> <updated>2024-10-01T21:56:23+02:00</updated> <id>https://shellpecker.github.io//posts/BlogRecommendations/</id> <content type="text/html" src="https://shellpecker.github.io//posts/BlogRecommendations/" /> <author> <name>shellpecker</name> </author> <category term="miscellaneous" /> <summary>Windows related Kernel/Driver Exploitation plackyhacker Overview Driver Development Terminus Geoff Chappell Vergilius Rootkit Development eversinc33</summary> </entry> </feed>
