PID Mutation: Fooling Sysmon by Patching EPROCESS and ETHREAD
PID Mutation technique using BYOVD to spoof process attribution in Sysmon by patching EPROCESS and ETHREAD structures in the Windows kernel.
PID Mutation: Fooling Sysmon by Patching EPROCESS and ETHREAD
PID Mutation technique using BYOVD to spoof process attribution in Sysmon by patching EPROCESS and ETHREAD structures in the Windows kernel.
Introduction to Static Analysis in Android Applications
First steps in the static analysis of Android applications: what it is, how an APK is put together and the essential tools to analyze it.
Sep 13, 2026 Pablo Castillo
CAPT Review - Mobile Hacking Lab Certified Android Penetration Tester 2026
Complete review of Mobile Hacking Lab's CAPT certification: preparation, the 72-hour exam against iBank, and a comparison with INE's eMAPT.
Jul 3, 2026 Daniel Moreno
How an Unprivileged User Can Bypass Netskope: Auditing Certificate Pinned Apps
How to identify and exploit misconfigured Certificate Pinned Apps in a Netskope deployment during a pentest, without needing administrative privileges.
Jul 1, 2026 Hilario José Bandrés Sasal
OSWA Review - OffSec Web Assessor 2026
My personal experience taking the OffSec OSWA certification: preparation, exam day, and tips for passing the WEB-200.
May 18, 2026 Matías Schiappacasse
ImagePanick: From SVG to RCE Chaining Weak Policies and Bugs in ImageMagick and Ghostscript
How a single SVG file can achieve arbitrary file write (and RCE) by chaining weak default policies in ImageMagick with vulnerabilities in Ghostscript 10.06.0, completely bypassing GS SAFER mode.
Apr 20, 2026 Eric Labrador
PIPA Review: Practical IoT Pentest Associate 2026
Review of the Practical IoT Pentest Associate (PIPA) certification from TCM Security, covering the exam structure, content, and personal experience.
Apr 7, 2026 Gorka Vila Pérez
eCPPTv3 Review - Certified Professional Penetration Tester 2026
A Comprehensive Review of INE eLearnSecurity’s eCPPTv3 Certification: Preparation, Exam, Tips, and Whether It’s Really Worth It
Mar 24, 2026 Mario Ramos Salsón
eCPPTv3 Cheatsheet
A focused eCPPTv3 cheatsheet covering port enumeration, Active Directory attacks, hash dumping, and brute force techniques
Mar 24, 2026 Mario Ramos Salsón
How to Submit an Article to Deep Hacking
Learn how to propose and submit articles to Deep Hacking, from proposal approval to the Pull Request, with a Markdown format guide and author page instructions.
Feb 26, 2026 Juan Antonio González Mena
How, When, and to Whom GPOs Are Applied
Discover how Group Policy Objects (GPO) work in Active Directory: LSDOU processing order, inheritance, security filtering, preferences, and execution context.
Feb 14, 2026 Juan Antonio González Mena