Skip to main content

Offensive Security Research #

I am mzdaemon, an offensive-security practitioner documenting practical research in:

  • Exploit development
  • Malware reverse engineering
  • Windows internals
  • Vulnerability research
  • Red team operations

PentestHacks is where I publish technical experiments, debugging notes, exploit-development walkthroughs, course reflections, and research from my continuing journey in offensive security.

Browse all articles →


Selected Research #

Reversing QuoteDB.exe — Bypassing ASLR and DEP #

Reverse engineering and exploitation of QuoteDB.exe using WinDbg and IDA, including memory-corruption analysis, address leakage, ASLR bypass, and DEP bypass.

Format String Vulnerability #

A practical examination of unsafe format-string handling, memory disclosure, register control, and exploitation concepts.

Windows PE File Structure #

A low-level introduction to the Portable Executable format and the structures used by Windows loaders, debuggers, and reverse-engineering tools.

Malware Reverse Engineering and Why It Matters #

My experience completing InvokeRE’s Introduction to Malware Binary Triage training using IDA and Binary Ninja.


Latest Writing #

Malware Reverse Engineering and Why It’s Essential #

Thoughts on malware-analysis training, binary triage, and developing practical reverse-engineering skills.

My Experience with Maldev Academy #

A review of the course material and its value for understanding malware development and Windows internals.

Starting a Process in Suspended Mode with Python #

Creating a Windows process in a suspended state for debugging, instrumentation, and reverse-engineering workflows.

Format String Vulnerability #

Understanding and investigating format-string misuse through practical debugging and exploitation.

View every article →


Browse by Topic #

Exploit Development · Reverse Engineering · Windows Internals · Malware · Debugger · Red Teaming


About #

I publish research and technical notes under the name mzdaemon.

My primary interests are malware reverse engineering, Windows exploitation, vulnerability research, low-level Windows internals, and adversary simulation.

The objective of this blog is simple:

Analyze deeply, document clearly, and share practical offensive-security knowledge.

GitHub · Tags · All posts