https://kuwaitist.github.io/Red teaming, Malware development, Blue teaming, Offensive Security, penetration testing 2026-08-07T11:37:40+00:00 Abdullah https://kuwaitist.github.io/ Jekyll © 2026 Abdullah /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-08-06T16:00:00+00:00 2026-08-07T11:35:21+00:00 https://kuwaitist.github.io/posts/ARTOC-by-White-Knight-Labs-Review/ Abdullah

If you’re serious about red teaming and want training that actually mirrors real engagements, the Advanced Red Team Operations Certification (ARTOC) by White Knight Labs is worth investing in. Why ARTOC is very good ARTOC is structured around running a full engagement from start to finish. You build your own C2 infrastructure with Cobalt Strike and Adaptix, set up redirector across AWS, Azure...

2026-04-17T18:00:00+00:00 2026-04-17T18:00:00+00:00 https://kuwaitist.github.io/posts/Astral-Projection/ Abdullah

Introduction In this blog I am going to show you one-way of doing module stomping that is pretty ideal to avoid most of the IOCs that you’d have with the normal module stomping. Note that this blog would’ve not been possible without the great course from Alex Reid UDRL-DEV ,Rasta Mouse’s great Crystal-Kit project, and the SWAPPALA blog. The source code of the UDRL can be found here. Module ...

2026-03-31T12:00:00+00:00 2026-03-31T12:00:00+00:00 https://kuwaitist.github.io/posts/ASYNC-BOFS/ Abdullah

Introduction In this blog I’ll be going over my implementation on ASYNC-BOFs + EKKO sleep mask. The implementation is no where near perfect It’s left to the reader to work on the idea and make it better. The issue with normal BOFs is that they block the agent during execution. While the BOF execute the agent can’t check-in or receive new tasks. So basically, if the BOF runs for an N seconds t...

2026-01-22T05:00:00+00:00 2026-01-22T05:00:00+00:00 https://kuwaitist.github.io/posts/Patching-Crystal-Palace/ Abdullah

Lately I’ve been studying CRTL which focuses on developing offensive tradecraft using Crystal palace framework. I never had the chance to use it before this, so am not an expert in any type of way. I read Rasta’s blog about “Cracking the Crystal Palace”, which goes deep in how crystal palace work and how to detect it. The yara rule Rasta’s wrote focuses on the __resolve_hook() which is respon...

2025-12-07T05:00:00+00:00 2026-01-19T09:45:24+00:00 https://kuwaitist.github.io/posts/WKL-ODPC-Review/ Abdullah

In the middle of 2025, I made a decision to step back from everything else and focus fully on “Evasion”, improving my Malware development skills, and to be better C programmer. I wanted to challenge myself with something real, a course with a LAB that has enterprise-level EDRs to implement my learnt skills on, and not just code and assume it would work. Course That’s when Offensive Developmen...