Injecting Code using Imported Functions into Native PE Files

A Project Zero post on using binary patch diffing to uncover Windows kernel memory disclosure bugs, including methodology, tooling, and notable findings from this approach.

The AsmResolver maintainer explains why .NET custom attributes are painful to parse — covering enum value encoding, slow and complex type-name parsing — and why their storage is a poor design choice.

A deep dive into the .NET file format to build the smallest possible 'Hello, World!' executable, manually crafting the PE and stripping metadata down to the theoretical minimum.

Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.

Part 2 of Bishop Fox's iOS repackaging series: a forked Theos toolchain ('theos-jailed') builds tweaks for non-jailbroken devices, demonstrated by patching the Trulia app to spoof its GPS location.

A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.