Nyx Labs / Blog
Signals from the field.
Research notes, defensive patterns, and lessons from systems we are permitted to discuss.
04 entries
Malware Development ↗ Binary Exploitation ↗ Security Research ↗ Security Research ↗
Reclaiming Clean Syscalls in Userland
Detecting userland EDR hooks and reclaiming clean Windows syscall stubs through surgical patching, section remapping, and fresh ntdll mapping.
Binary Exploitation
A practical field guide to command injection, overflows, ROP, format strings, and heap exploitation with annotated C and pwntools examples.
Ghost HTTP Methods: How HTTP Verb Mutation Bypasses Modern WAFs across Middleware Layers
How legacy HTTP method overrides create a dangerous disagreement between edge security controls and application middleware.
Split-Brain JSON: Exploiting Parser Disagreement Across Validation Boundaries for Privilege Escalation
How inconsistent duplicate-key handling can make gateways and backend services reach different security decisions for one JSON payload.