#TU Delft

• Paper: Anonymous online purchases with exhaustive operational security

• Master Thesis: Detecting malicious behaviour using system calls

#Master Thesis

• Master Thesis: Detecting malicious behaviour using system calls

• Shellguard: blocking the execution of shell processes by unknown processes

• Virus Bulletin paper: Behavioural Detection and Prevention of Malware on OS X

#Github

• Shellguard: blocking the execution of shell processes by unknown processes

• SauronEye: a search tool to facilitate your hunger for credentials

#Paper

• Virus Bulletin paper: Behavioural Detection and Prevention of Malware on OS X

#Empire

• Reigning the Empire, evading detection

• Phishing between the App Whitelists

#Tradecraft

• Reigning the Empire, evading detection

• Persisting our implant like the CIA

• An Outlook parasite for stealth persistence

#Detection

• Reigning the Empire, evading detection

#Exploitation

• Eternalromance: eternal pwnage of Windows Server 2003 and XP

#MS17-010

• Eternalromance: eternal pwnage of Windows Server 2003 and XP

#App whitelisting bypass

• Phishing between the App Whitelists

#.NET

• Towards generic .NET assembly obfuscation (Pt. 1)

#Obfuscation

• Towards generic .NET assembly obfuscation (Pt. 1)

• A blueprint for evading industry leading endpoint protection in 2022

• Process injection in 2023, evading leading EDRs

#Persistence

• Persisting our implant like the CIA

• An Outlook parasite for stealth persistence

#Automation

• Automating Proxmox with Terraform and Ansible

#Evasion

• A blueprint for evading industry leading endpoint protection in 2022

• Process injection in 2023, evading leading EDRs