APC Queue Injection MSI Payload — Full AV Evasion Chain
Build a fully obfuscated MSI payload using APC Queue shellcode injection, bypassing Windows Defender with SGN encoding, IAT obfuscation, string encryption, a...
whoami
Kwangyun Keum
Red Team Operator / Security Researcher — offensive tooling, evasion & adversary emulation.
Recent Posts
LNK Weaponization & Windows Defender 11 Bypass PoC
Weaponizing a malicious LNK file to stage an AMSI bypass and shellcode injector that evades Windows 11 Defender for a Meterpreter shell.
Browser-in-Browser (noVNC) Phishing Attack PoC
Proof of concept for a Browser-in-Browser noVNC phishing attack that bypasses MFA using a reverse proxy and remote session control.
AMSI 2023 Evasion
Bypassing Windows 10 AMSI by patching AmsiScanBuffer in memory and obfuscating the PowerShell payload to land an in-memory reverse shell.
Blind SQL Injection to RCE
Automating blind SQL injection on DVWA with SQLMap to dump and crack credentials, and mitigations like parameterized queries.