https://ayedaemon.github.io/ Recent content on Connected Hugo -- gohugo.io en Fri, 04 Apr 2025 20:17:56 +0530 https://ayedaemon.github.io/post/2025/04/intro-to-re-part-5/ Fri, 04 Apr 2025 20:17:56 +0530 https://ayedaemon.github.io/post/2025/04/intro-to-re-part-5/ How does buffer overflow can lead to change in control flow https://ayedaemon.github.io/post/2024/04/elf-chronicles-plt-got/ Wed, 03 Apr 2024 20:17:56 +0530 https://ayedaemon.github.io/post/2024/04/elf-chronicles-plt-got/ Exploring general concepts of dynamic linking with PLT and GOT tables https://ayedaemon.github.io/post/2023/12/elf-chronicles-relocations/ Fri, 08 Dec 2023 14:17:56 +0530 https://ayedaemon.github.io/post/2023/12/elf-chronicles-relocations/ Exploring general concept of ELF relocations https://ayedaemon.github.io/post/2023/10/elf-chronicles-symbol-tables/ Sun, 29 Oct 2023 22:15:08 +0530 https://ayedaemon.github.io/post/2023/10/elf-chronicles-symbol-tables/ Exploring ELF symbol tables https://ayedaemon.github.io/post/2023/10/elf-chronicles-string-tables/ Sun, 29 Oct 2023 15:12:36 +0530 https://ayedaemon.github.io/post/2023/10/elf-chronicles-string-tables/ Exploring ELF string tables https://ayedaemon.github.io/post/2023/10/elf-chronicles-program-headers/ Fri, 20 Oct 2023 15:21:49 +0530 https://ayedaemon.github.io/post/2023/10/elf-chronicles-program-headers/ Exploring ELF program Headers https://ayedaemon.github.io/post/2023/10/elf-chronicles-section-headers/ Thu, 19 Oct 2023 00:24:06 +0530 https://ayedaemon.github.io/post/2023/10/elf-chronicles-section-headers/ Exploring ELF Section Headers https://ayedaemon.github.io/post/2023/10/elf-chronicles-elf-header/ Wed, 18 Oct 2023 13:34:57 +0530 https://ayedaemon.github.io/post/2023/10/elf-chronicles-elf-header/ Exploring ELF file headers https://ayedaemon.github.io/post/2023/05/intro-to-re-part-4/ Mon, 01 May 2023 02:34:50 +0530 https://ayedaemon.github.io/post/2023/05/intro-to-re-part-4/ Some things about process and stack memory https://ayedaemon.github.io/post/2023/05/eudyptula-task-7/ Mon, 01 May 2023 02:32:12 +0530 https://ayedaemon.github.io/post/2023/05/eudyptula-task-7/ Task 7 for Eudyptula challenge https://ayedaemon.github.io/post/2023/04/intro-to-re-simple-calculator/ Mon, 03 Apr 2023 21:59:48 +0530 https://ayedaemon.github.io/post/2023/04/intro-to-re-simple-calculator/ How to reverse engineer a simple calculator program from scratch https://ayedaemon.github.io/post/2023/04/intro-to-re-part-3/ Sat, 01 Apr 2023 21:59:33 +0530 https://ayedaemon.github.io/post/2023/04/intro-to-re-part-3/ Blog covers how disassembly of basic operations and functions in C programming looks like. https://ayedaemon.github.io/post/2023/03/intro-to-re-part-2/ Sun, 19 Mar 2023 22:07:39 +0530 https://ayedaemon.github.io/post/2023/03/intro-to-re-part-2/ How to reverse engineer a basic C program https://ayedaemon.github.io/post/2022/12/pluggable-authentication-modules-linux/ Tue, 27 Dec 2022 23:25:23 +0530 https://ayedaemon.github.io/post/2022/12/pluggable-authentication-modules-linux/ Linux-PAM is a system of libraries that handle the authentication tasks of applications (services) on the system. https://ayedaemon.github.io/post/2022/12/recording_system_events_with_auditd/ Sun, 11 Dec 2022 21:15:13 +0530 https://ayedaemon.github.io/post/2022/12/recording_system_events_with_auditd/ auditing linux systems with auditd https://ayedaemon.github.io/post/2022/09/fun-with-mbr/ Wed, 28 Sep 2022 01:10:18 +0530 https://ayedaemon.github.io/post/2022/09/fun-with-mbr/ Analysis of bootloader and partition table; And some fun with Master Boot Record https://ayedaemon.github.io/post/2022/09/intro-to-re/ Wed, 21 Sep 2022 01:10:18 +0530 https://ayedaemon.github.io/post/2022/09/intro-to-re/ Basics of assembly and its relation with higher level constucts https://ayedaemon.github.io/post/2022/09/eudyptula-task-6/ Sun, 18 Sep 2022 13:57:01 +0530 https://ayedaemon.github.io/post/2022/09/eudyptula-task-6/ Task 6 for Eudyptula challenge https://ayedaemon.github.io/post/2022/08/analyzing-simple-powershell-malware/ Tue, 30 Aug 2022 17:55:02 +0530 https://ayedaemon.github.io/post/2022/08/analyzing-simple-powershell-malware/ Story of how I examined some basic powershell malware I happened to stumble into on github. https://ayedaemon.github.io/post/2022/06/eudyptula-task-5/ Wed, 22 Jun 2022 16:14:27 +0530 https://ayedaemon.github.io/post/2022/06/eudyptula-task-5/ Task 5 for Eudyptula challenge https://ayedaemon.github.io/post/2022/06/eudyptula-task-4/ Fri, 17 Jun 2022 16:14:27 +0530 https://ayedaemon.github.io/post/2022/06/eudyptula-task-4/ Task 4 for Eudyptula challenge https://ayedaemon.github.io/post/2022/06/eudyptula-task-3/ Thu, 16 Jun 2022 16:14:27 +0530 https://ayedaemon.github.io/post/2022/06/eudyptula-task-3/ Task 3 for Eudyptula challenge https://ayedaemon.github.io/post/2022/06/eudyptula-task-2/ Wed, 01 Jun 2022 15:14:27 +0530 https://ayedaemon.github.io/post/2022/06/eudyptula-task-2/ Task 2 for Eudyptula challenge https://ayedaemon.github.io/post/2022/05/hands-on-intro-to-sbom/ Fri, 27 May 2022 22:56:22 +0530 https://ayedaemon.github.io/post/2022/05/hands-on-intro-to-sbom/ The concept of a Bill Of Materials (BOM) is well-established in traditional manufacturing as part of supply chain management. A manufacturer uses a BOM to track the parts it uses to create a product. If defects are later found in a specific part, the BOM makes it easy to locate affected products. In software industry, this concept is fairly new and is used to keep track of all the ingredients of the software. https://ayedaemon.github.io/post/2022/05/eudyptula-task-1/ Wed, 25 May 2022 15:14:27 +0530 https://ayedaemon.github.io/post/2022/05/eudyptula-task-1/ Task 1 for Eudyptula challenge https://ayedaemon.github.io/post/2022/02/fileless-malwares-how-and-why/ Sat, 26 Feb 2022 23:43:01 +0530 https://ayedaemon.github.io/post/2022/02/fileless-malwares-how-and-why/ What are file-less malwares? How do they work on linux? According to Wikipedia, file-less malware is a variant of computer related malicious software that exists exclusively as a computer memory-based artifact i.e. in RAM. In other words, the malware/program is never written to harddisk but directly loaded in memory. To get a better understanding of how that happens in linux, we need to understand how a normal program loads itself into memory and executes itself. https://ayedaemon.github.io/post/2021/02/git-form-inside-out/ Thu, 25 Feb 2021 23:07:04 +0530 https://ayedaemon.github.io/post/2021/02/git-form-inside-out/ <blockquote> <p>Inside out approach to learn git</p> </blockquote> https://ayedaemon.github.io/post/2021/02/keylogger-for-linux/ Tue, 02 Feb 2021 14:47:26 +0530 https://ayedaemon.github.io/post/2021/02/keylogger-for-linux/ <blockquote> <p>Developing a low level keylogger for linux using C.</p> </blockquote> https://ayedaemon.github.io/post/2022/01/debugging-c-code/ Wed, 27 Jan 2021 14:58:51 +0530 https://ayedaemon.github.io/post/2022/01/debugging-c-code/ <blockquote> <p>How your x86 program starts up in linux</p> </blockquote> https://ayedaemon.github.io/post/2020/12/advanced-intrusion-detection-environment/ Sat, 19 Dec 2020 14:25:28 +0530 https://ayedaemon.github.io/post/2020/12/advanced-intrusion-detection-environment/ <blockquote> <p>Host-based intrusion detection system (HIDS) for checking the integrity of files.</p> </blockquote> https://ayedaemon.github.io/post/2020/12/luks-disk-encryption/ Sat, 19 Dec 2020 13:15:55 +0530 https://ayedaemon.github.io/post/2020/12/luks-disk-encryption/ <blockquote> <p>Linux Unified Key Encryption — Disk Encryption</p> </blockquote> https://ayedaemon.github.io/about/ Mon, 01 Jan 0001 00:00:00 +0000 https://ayedaemon.github.io/about/ Hey there, I&rsquo;m an Information Security Engineer from India who is interested in DevOps culture and non-Excel-based security practices. I spend most of the time working on SOAR automations and rest of the times I try to play with malwares. [more TBD] Find my resume here -&gt; https://ayedaemon.github.io/extra/rishabh_umrao_secops.pdf