frereit's blog

Recently, my first ever paper has been published on the IACR ePrint server: https://eprint.iacr.org/2026/1351.

In this short post, I want to ramble about my approach to writing malware for Windows systems that are protected by some kind of Antivirus or EDR software.

The “rusty_rev” challenge was, as the name suggests, a Rust reverse engineering challenge for the HackDay 2025 Qualifications CTF.

Abstract When building your C2 agent, you may want to avoid outbound traffic directly from your agent to the C2 server for a number of reasons.

Abstract In this blog post, we’ll be covering Microsoft Warbird and how we can abuse it to sneakily load shellcode without being detected by AV or EDR solutions.

An overview of this article (TL;DR) TL;DR: AES-GCM is great, as long as every nonce (mnemonic: number used once) is truly unique.

In the previous post, we discussed how to decode a Bootstring string.

You may know about Punycode, a way to represent Unicode strings with only ASCII characters.

In this section, I’ll be collecting links to articles, papers, blog posts, and other resources that I find interesting without any categorization and in no particular order.