Windows Offensive Security Research #
Reverse Engineering • Malware Analysis • Windows Internals • Exploit Development • Vulnerability Research
PentestHacks is my technical research notebook where I document practical work in low-level Windows security, malware analysis, binary reverse engineering, exploit development, and red team operations.
The articles focus on understanding how software works internally, how vulnerabilities are discovered and exploited, and how malicious code can be analyzed using tools such as WinDbg, Binary Ninja, IDA, x64dbg, and Windows debugging utilities.
Browse all research →
Explore topics →
Featured Research #
Reversing QuoteDB.exe and Bypassing ASLR and DEP #
A practical reverse-engineering and exploit-development walkthrough covering memory corruption, address leakage, ASLR bypass, DEP bypass, WinDbg, and static analysis.
Understanding the Windows PE File Structure #
An introduction to the Portable Executable format and the structures used by the Windows loader, debuggers, malware, and reverse-engineering tools.
Format String Vulnerability Analysis #
A technical investigation of unsafe format-string handling, memory disclosure, register control, and exploitation concepts.
Understanding the Process Environment Block #
A low-level look at the Windows Process Environment Block and how it is used by applications, debuggers, shellcode, and malware.
Malware Reverse Engineering and Binary Triage #
My experience studying malware binary triage, reverse engineering, static analysis, and analyst methodology.
Latest Writing #
- Reverse Engineering CastRipper
- Starting a Windows Process in Suspended Mode
- Windows PE AddressOfNames
- Understanding the LDR Data Structures
- Win32 Information Leak for Exploit Development
Explore by Topic #
Exploit Development · Reverse Engineering · Windows Internals · Malware Analysis · Debugging · Low-Level Concepts · Red Teaming
About PentestHacks #
PentestHacks is an independent technical blog focused on practical offensive-security research.
I publish write-ups based on experimentation, training, debugging sessions, vulnerable software, malware samples, and personal research. My goal is to explain technical subjects clearly enough that readers can reproduce the work and develop a deeper understanding of the underlying systems.
Analyze deeply. Document clearly. Share practical knowledge.
About · GitHub · Tags · All articles