https://tdmathison.github.io/posts/oscp-review/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Penetration-Testing-Process/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/stapler/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/6days-lab/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/winenum-script/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/slae32-1/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/slae32-2/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/slae32-3/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/slae32-4/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/slae32-5/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/slae32-6/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/slae32-7/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/osce-review/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Getting-started-FlareVM-Ghidra/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Ghidra-DIA-SDK-PDB-Error/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Digging-into-obfuscated-excel-formula-code/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Manually-unpacking-malware/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Manually-unpacking-malware-part2/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/PEB_TEB_TIB-Structure-Offsets/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Searching-IAT-for-DLL/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Finding-the-start-of-Emotet-malware-in-MFC-app/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Malware-decrypting-into-new-memory-maps/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/String-and-function-hiding-techniques/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Resolving-IAT-with-AGDCservices-scripts/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/RC4-Crypto-Usage-In-Malware/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/MalwareReport-CTS/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Npm_Coa_203_DanaBot_Dropper/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Hex-Rays-IDA-Tips-and-Tricks/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/Switching-IDAPro-Python-Version/ 2023-01-03T19:16:36-08:00 https://tdmathison.github.io/posts/sp-analysis-failed-error/ 2023-01-04T09:58:49-08:00 https://tdmathison.github.io/posts/Windows-11-ARM-Reverse-Engineering/ 2023-09-15T18:14:43-07:00 https://tdmathison.github.io/posts/Golang-Reverse-Engineering-Tips/ 2023-09-18T08:00:00-07:00 https://tdmathison.github.io/posts/Extracting-out-DarkGate-malware-from-MSI/ 2024-05-04T22:00:00-07:00 https://tdmathison.github.io/posts/Decoding-Ebury-Malware-SSH-Commands/ 2024-06-06T08:50:00-07:00 https://tdmathison.github.io/posts/Beavertail-and-InvisibleFerret-malware/ 2024-08-12T20:00:00-07:00 https://tdmathison.github.io/posts/IDAPro-plugins-2025/ 2025-01-22T10:00:00-08:00 https://tdmathison.github.io/posts/Rust-Malware/ 2025-03-03T10:14:40-08:00 https://tdmathison.github.io/posts/Using-Syscall-Tables-in-IDA-Pro-for-Linux-Reverse-Engineering/ 2025-03-09T11:20:00-07:00 https://tdmathison.github.io/posts/Reverse-Engineering-With-CPP-STL-Types/ 2025-04-21T12:10:00-07:00 https://tdmathison.github.io/posts/How-rusts-ownership-model-affects-malware-re/ 2025-05-12T17:05:00-07:00 https://tdmathison.github.io/posts/Kimwolf-botnet/ 2026-03-30T23:24:56-07:00 https://tdmathison.github.io/posts/Seylaran-Information-Stealing-Malware/ 2026-03-30T23:57:14-07:00 https://tdmathison.github.io/posts/MuddyWater-Fooder-Malware/ 2026-03-16T19:13:57-07:00 https://tdmathison.github.io/posts/MuddyWater-Malware-Loader-drops-LightPhoenix/ 2026-03-31T05:57:16-07:00 https://tdmathison.github.io/posts/Wide-String-Decoding/ 2026-03-31T02:58:27-07:00 https://tdmathison.github.io/posts/MuddyWater-LightPhoenix-Deobfuscation/ 2026-04-21T10:05:00-07:00 https://tdmathison.github.io/posts/Bringing-Local-AI-Assistance-into-IDA-Pro/ 2026-05-26T12:09:17-07:00 https://tdmathison.github.io/posts/Installing-InetSim-2026-lab/ 2026-09-10T12:54:25-07:00 https://tdmathison.github.io/posts/Installing-CAPEv2-2026-lab/ 2026-09-10T12:54:25-07:00 https://tdmathison.github.io/posts/Installing-AssemblyLine4-2026-lab/ 2026-09-10T12:54:25-07:00 https://tdmathison.github.io/posts/CAPEv2-Custom-Parser-Development-Guide-2026-lab/ 2026-09-10T12:35:00-07:00 https://tdmathison.github.io/scripts/base64-decode-file-strings/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/binutil/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/disassemble-shellcode/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/dump_pe_headers/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/encryption-detect-rc4/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/encryption-detect-xor/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/encryption-detect-xor_advanced/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/extract-embedded-mz/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/extract-urls-from-binary/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/extractor-agent-tesla/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/extractor-formbook/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/extractor-lokibot/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/extractor-qakbot/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/extractor-racoon-stealer/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/extractor-redline-stealer/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/extractor-vidar-stealer/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/find-binary-strings/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/generate-file-hash/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/generate-yara-template/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/match-file-with-yara/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/packer-detection/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/pe-file-analysis/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/categories/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/tags/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/resources/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/references/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/scripts/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/archives/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/about/ 2026-09-10T12:54:52-07:00 https://tdmathison.github.io/ https://tdmathison.github.io/tags/offensive-security/ https://tdmathison.github.io/tags/oscp/ https://tdmathison.github.io/tags/penetration-testing/ https://tdmathison.github.io/tags/hacking/ https://tdmathison.github.io/tags/ctf/ https://tdmathison.github.io/tags/walkthrough/ https://tdmathison.github.io/tags/windows/ https://tdmathison.github.io/tags/enumeration/ https://tdmathison.github.io/tags/script/ https://tdmathison.github.io/tags/assembly/ https://tdmathison.github.io/tags/x86/ https://tdmathison.github.io/tags/exploit-development/ https://tdmathison.github.io/tags/shellcode/ https://tdmathison.github.io/tags/slae32/ https://tdmathison.github.io/tags/egghunter/ https://tdmathison.github.io/tags/osce/ https://tdmathison.github.io/tags/flarevm/ https://tdmathison.github.io/tags/ghidra/ https://tdmathison.github.io/tags/malware/ https://tdmathison.github.io/tags/excel/ https://tdmathison.github.io/tags/scripts/ https://tdmathison.github.io/tags/macros/ https://tdmathison.github.io/tags/phishing/ https://tdmathison.github.io/tags/packers/ https://tdmathison.github.io/tags/iat/ https://tdmathison.github.io/tags/emotet/ https://tdmathison.github.io/tags/mfc/ https://tdmathison.github.io/tags/afxwinmain/ https://tdmathison.github.io/tags/debugging/ https://tdmathison.github.io/tags/ida/ https://tdmathison.github.io/tags/memory/ https://tdmathison.github.io/tags/techniques/ https://tdmathison.github.io/tags/stack/ https://tdmathison.github.io/tags/obfuscation/ https://tdmathison.github.io/tags/ntdll-dll/ https://tdmathison.github.io/tags/kernel32-dll/ https://tdmathison.github.io/tags/hermes/ https://tdmathison.github.io/tags/ransomware/ https://tdmathison.github.io/tags/rc4/ https://tdmathison.github.io/tags/crypto/ https://tdmathison.github.io/tags/report/ https://tdmathison.github.io/tags/javascript/ https://tdmathison.github.io/tags/danabot/ https://tdmathison.github.io/tags/tips-and-tricks/ https://tdmathison.github.io/tags/arm/ https://tdmathison.github.io/tags/macbook-pro/ https://tdmathison.github.io/tags/golang/ https://tdmathison.github.io/tags/autoit/ https://tdmathison.github.io/tags/darkgate/ https://tdmathison.github.io/tags/msi/ https://tdmathison.github.io/tags/elf/ https://tdmathison.github.io/tags/ebury/ https://tdmathison.github.io/tags/beavertail/ https://tdmathison.github.io/tags/invisibleferret/ https://tdmathison.github.io/tags/plugins/ https://tdmathison.github.io/tags/rust/ https://tdmathison.github.io/tags/blackcat/ https://tdmathison.github.io/tags/rustybuer/ https://tdmathison.github.io/tags/ficker/ https://tdmathison.github.io/tags/fickle/ https://tdmathison.github.io/tags/hive/ https://tdmathison.github.io/tags/p2pinfect/ https://tdmathison.github.io/tags/syscall/ https://tdmathison.github.io/tags/linux/ https://tdmathison.github.io/tags/stl/ https://tdmathison.github.io/tags/c/ https://tdmathison.github.io/tags/struct/ https://tdmathison.github.io/tags/kimwolf/ https://tdmathison.github.io/tags/botnet/ https://tdmathison.github.io/tags/infostealer/ https://tdmathison.github.io/tags/seylaran/ https://tdmathison.github.io/tags/muddywater/ https://tdmathison.github.io/tags/fooder/ https://tdmathison.github.io/tags/decryption/ https://tdmathison.github.io/tags/muddywater/ https://tdmathison.github.io/tags/unc3313/ https://tdmathison.github.io/tags/unc5667/ https://tdmathison.github.io/tags/strings/ https://tdmathison.github.io/tags/decoding/ https://tdmathison.github.io/tags/widechar/ https://tdmathison.github.io/tags/lightphoenix/ https://tdmathison.github.io/tags/backdoor/ https://tdmathison.github.io/tags/ollama/ https://tdmathison.github.io/tags/gepetto/ https://tdmathison.github.io/tags/ai/ https://tdmathison.github.io/tags/plugin/ https://tdmathison.github.io/tags/inetsim/ https://tdmathison.github.io/tags/cape/ https://tdmathison.github.io/tags/sandbox/ https://tdmathison.github.io/tags/assemblyline4/ https://tdmathison.github.io/tags/parsers/ https://tdmathison.github.io/tags/decoders/ https://tdmathison.github.io/categories/blogging/ https://tdmathison.github.io/categories/offensive-security/ https://tdmathison.github.io/categories/penetration-testing/ https://tdmathison.github.io/categories/ctf/ https://tdmathison.github.io/categories/walkthrough/ https://tdmathison.github.io/categories/slae32/ https://tdmathison.github.io/categories/malware-analysis/ https://tdmathison.github.io/page2/ https://tdmathison.github.io/page3/ https://tdmathison.github.io/page4/ https://tdmathison.github.io/page5/ https://tdmathison.github.io/page6/