Offensive Security Research #
I am mzdaemon, an offensive-security practitioner documenting practical research in:
- Exploit development
- Malware reverse engineering
- Windows internals
- Vulnerability research
- Red team operations
PentestHacks is where I publish technical experiments, debugging notes, exploit-development walkthroughs, course reflections, and research from my continuing journey in offensive security.
Selected Research #
Reversing QuoteDB.exe — Bypassing ASLR and DEP #
Reverse engineering and exploitation of QuoteDB.exe using WinDbg and IDA, including memory-corruption analysis, address leakage, ASLR bypass, and DEP bypass.
Format String Vulnerability #
A practical examination of unsafe format-string handling, memory disclosure, register control, and exploitation concepts.
Windows PE File Structure #
A low-level introduction to the Portable Executable format and the structures used by Windows loaders, debuggers, and reverse-engineering tools.
Malware Reverse Engineering and Why It Matters #
My experience completing InvokeRE’s Introduction to Malware Binary Triage training using IDA and Binary Ninja.
Latest Writing #
Malware Reverse Engineering and Why It’s Essential #
Thoughts on malware-analysis training, binary triage, and developing practical reverse-engineering skills.
My Experience with Maldev Academy #
A review of the course material and its value for understanding malware development and Windows internals.
Starting a Process in Suspended Mode with Python #
Creating a Windows process in a suspended state for debugging, instrumentation, and reverse-engineering workflows.
Format String Vulnerability #
Understanding and investigating format-string misuse through practical debugging and exploitation.
Browse by Topic #
Exploit Development · Reverse Engineering · Windows Internals · Malware · Debugger · Red Teaming
About #
I publish research and technical notes under the name mzdaemon.
My primary interests are malware reverse engineering, Windows exploitation, vulnerability research, low-level Windows internals, and adversary simulation.
The objective of this blog is simple:
Analyze deeply, document clearly, and share practical offensive-security knowledge.