RubberDuck

It's here. An interactive map of the PE format — click any field, watch its bytes light up, see exactly what it points to and why. Single HTML file. Fully offline. No install. #reverseengineering #windowsinternals #peformat

@Salsa12__ Thanks for sharing my website, I really appreciate it! 👍

Great static website to learn/remember about the PE File Format proteqtum.com/cheatsheet/pe-…

The next interactive map is already in the works. Another deep dive into low-level structures coming soon.

It's here. An interactive map of the PE format — click any field, watch its bytes light up, see exactly what it points to and why. Single HTML file. Fully offline. No install. #reverseengineering #windowsinternals #peformat

@JustWantToQ1 You ask for a grandma's stew recipe and Claude immediately flags it as bioterrorism. Welcome to the club, dealing with this every second prompt. 🛡️🤦‍♂️

I hate you Claude

What if we took the PE format, broke it down to bytes, and gave it a brand new, interactive face? No boring PDFs. Just pure HTML that breathes. Something is brewing... 🛠️#ReverseEngineering #MalwareAnalysis #WindowsInternals #PEFormat

@Octoberfest73 MinGW-gcc is basically a cheat code for getting flagged on VT for a 10-line app. 💀 Nothing like manually crafting a .rc file via windres just to convince AV engines I'm not a Russian APT group.

Interesting food for thought concerning payload dev... Same basic unsigned console app (calls MessageBoxA and exits): - Left: Compiled w/ mingw-gcc - Mid: Compiled w/ VS - Right: Compiled w/ VS + resource updated /w rcedit to populate OriginalFilename, ProductName, etc

@rifteyy Haha, I must have missed that during translation! 🤣 Thanks for pointing it out, and I'm really glad you enjoyed the read!

@RubberDuckCz I am reading and suddenly became surprised why is there a note in Czech and thought the automatic translation acted up, but seems like not 🤣 Awesome read, though!

Second part of the Windows x64 shellcode creation series! TEB → PEB → modules. How to navigate memory without static addresses. #Shellcode #BlueTeam #x64 #SecurityResearch proteqtum.com/posts/02-win-x…

@5mukx The third part is based on my old portable shellcode. Good old days 😌

Introduction to windows shellcode development series. Part 1 :securitycafe.ro/2015/10/30/int… Part 2 :securitycafe.ro/2015/12/14/int… Part 3 :securitycafe.ro/2016/02/15/int…