Research Notes

Blog

Notes on vulnerability research, exploit development, red team workflows, code auditing, and security tooling.

2026-08-02

Wirecat: A Native C Networking Utility

A detailed release article for Wirecat, a native C stream and session utility for Linux/POSIX workflows with TLS, mTLS, QUIC, relays, proxies, broker mode, PTY sessions, file transfer, tests, fuzzing, release packaging, and documentation.

CLinuxNetworking

2026-07-27

Clipboard-Safe File Transfer With PowerShell Chunks

A practical airgap-style transfer method for restricted RDP sessions: split a file into clipboard-safe base64 chunks with PowerShell, copy the text out, rebuild it on Linux, and verify the SHA256 hash.

WindowsPowerShellFile transfer

2026-07-22

Windows UAC Bypass One-Liners

A practical lab note on Windows UAC bypass one-liners, registry hijack patterns, auto-elevated binaries, cleanup, and defensive review.

WindowsUACPrivilege escalation

2026-07-22

Curl Delivered Reverse Shell Oneliners

A practical reference for curl-delivered reverse shell oneliners in authorized labs, covering Bash, Python, Perl, Ruby, PHP, Netcat, OpenSSL, Node.js, Lua, and Java payload delivery patterns.

Reverse shellsCurlOperator notes

2026-07-21

WordPress Plugin Auditing

A focused methodology for reviewing WordPress plugins: capability checks, nonce handling, AJAX routes, REST APIs, file paths, and stored data flows.

WordPressCode auditingVulnerability research

2026-07-21

WinRM Tradecraft For Authorized Assessments

A focused WinRM tradecraft article covering authentication choice, session context, file movement, Kerberos behavior, and evidence handling.

WinRMRemote executionRed team