The Blue Cord Security blog is my open notebook for security research, technical exploration, and hands-on learning. I write about software security, vulnerability research, offensive security, malware analysis, systems, and whatever else I’m actively investigating.
Overview What's up, folks! In this article, we are hacking into Authority from Hack the Box, which is a Windows domain controller running various services. One of the most important services, as you'll find out, is Active Directory Certificate Servic...
Two hip-hop artists are caught in a musical feud that extends into cyberspace. One artist's oversharing in his lyrics makes him a target, leading the rival label to hire a hacker to exploit vulnerabilities. As a security analyst for OWL Records, your...
The assassination of Hezbollah leader Hassan Nasrallah by an Israeli airstrike in September 2024 has heightened tensions in the region, potentially leading to significant cyber retaliation by Hezbollah's advanced cyber unit, Volatile Cedar. This arti...
In this write-up, I investigate a "Malware Detected" alert from the LetsDefend SOC platform, focusing on SOC 104 Event ID: 14, involving googleupdate.exe. Using tools like VirusTotal and X-Force Threat Intelligence, along with log and process analysi...
This article explains the process of decompiling malicious Python executables using tools like Pyinstxractor-ng and Decompyle++. It covers the various stages of the Pyinstaller compilation process, from analysis and collection to bytecode compilation...
