<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
  <channel>
    <title>Asbawy Blog</title>
    <description>Security cheatsheets, quick references, and field notes by Asbawy.</description>
    <link>https://asbawy.com</link>
    <lastBuildDate>Mon, 02 Nov 2026 07:31:13 GMT</lastBuildDate>
    
    <item>
      <title><![CDATA[The Twenty-Minute Billionaire: Inside the $6.36 Billion Binance Heist]]></title>
      <description><![CDATA[An interactive, visual threat intelligence breakdown of the October 29, 2026 Binance heist ($6.36 billion drained across 10 blockchains), featuring step-by-step TypeScript simulations of the zero-key container hijack, the 50-nonce EIP-7702 wallet mutation, the 37-minute DeFi freeze race, and hardware defenses.]]></description>
      <link>https://asbawy.com/logs/october-2026-binance-heist</link>
      <guid>https://asbawy.com/logs/october-2026-binance-heist</guid>
      <pubDate>Sun, 01 Nov 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[NetExec (nxc) Cheat Sheet]]></title>
      <description><![CDATA[Reference for NetExec (nxc). Covers multi-protocol enumeration (SMB, LDAP, WinRM, MSSQL, RDP, WMI, SSH, VNC, FTP), safe password spraying, credential harvesting, BloodHound CE collection, execution methods, and detection telemetry.]]></description>
      <link>https://asbawy.com/cheatsheet/Tools/NetExec</link>
      <guid>https://asbawy.com/cheatsheet/Tools/NetExec</guid>
      <pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[A Technical Dive into 5G Hacking]]></title>
      <description><![CDATA[A complete technical breakdown of 5G Standalone (SA) vulnerabilities, covering RAN hardware exploitation, SBI web vulnerability chains, 5G-AKA cryptographic weaknesses, and Kubernetes CNF compromise.]]></description>
      <link>https://asbawy.com/logs/5G-hacking</link>
      <guid>https://asbawy.com/logs/5G-hacking</guid>
      <pubDate>Fri, 07 Aug 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[CertiGhost (CVE-2026-54121): How a Low-Privileged AD User Impersonated a Domain Controller via AD CS]]></title>
      <description><![CDATA[A deep dive into CVE-2026-54121 — the CertiGhost vulnerability that let any Domain User forge a Domain Controller certificate through an AD CS chase fallback, escalate to DCSync, and fully compromise the domain.]]></description>
      <link>https://asbawy.com/logs/certighost-cve-2026-54121</link>
      <guid>https://asbawy.com/logs/certighost-cve-2026-54121</guid>
      <pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[File Transfer Techniques]]></title>
      <description><![CDATA[Cheatsheet for moving files across Linux, Windows, restricted shells, and inspected networks. Built for CTF players, bug bounty hunters, and internal pentesters.]]></description>
      <link>https://asbawy.com/cheatsheet/Tools/file-transfer-techniques</link>
      <guid>https://asbawy.com/cheatsheet/Tools/file-transfer-techniques</guid>
      <pubDate>Thu, 09 Jul 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Source Code Review: Unearthing Critical Flaws in PHP]]></title>
      <description><![CDATA[A direct, no-fluff guide to auditing PHP codebases. Learn to spot critical vulnerabilities, map attack surfaces, and weaponize findings with functional exploits.]]></description>
      <link>https://asbawy.com/logs/php-code-review</link>
      <guid>https://asbawy.com/logs/php-code-review</guid>
      <pubDate>Wed, 08 Jul 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA['Battlefield Forensics: Anatomy of the IDF''s Captured "Olar" Secure Smartphone in Syria']]></title>
      <description><![CDATA['An analysis of the IDF''s captured "Olar" secure smartphone in Syria, detailing its hardware, MDM-enforced kiosk hardening, ORION C4I payload, and the incident''s OPSEC implications.']]></description>
      <link>https://asbawy.com/logs/olar-device-forensics</link>
      <guid>https://asbawy.com/logs/olar-device-forensics</guid>
      <pubDate>Thu, 02 Jul 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Practical Wireless Exploitation for Red Teams]]></title>
      <description><![CDATA[A practical playbook detailing advanced wireless offensive operations, covering corporate Wi-Fi infiltration, BLE MITM, RFID cloning, and IoT vulnerabilities.]]></description>
      <link>https://asbawy.com/logs/practical-wireless-exploitation-for-red-teams</link>
      <guid>https://asbawy.com/logs/practical-wireless-exploitation-for-red-teams</guid>
      <pubDate>Thu, 18 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Active Directory Enumeration & Attacks Cheatsheet]]></title>
      <description><![CDATA[A comprehensive reference for AD enumeration and attack paths — covering external/internal recon, password spraying, network poisoning, credentialed enumeration, ACL abuse, Kerberos attacks, delegation abuse, lateral movement, domain dominance, GPO exploitation, ADCS misconfigurations, cross-forest trust abuse, and advanced exploits. Designed for Red Team engagements.]]></description>
      <link>https://asbawy.com/cheatsheet/Active%20Directory/Active_Directory_Cheatsheet</link>
      <guid>https://asbawy.com/cheatsheet/Active%20Directory/Active_Directory_Cheatsheet</guid>
      <pubDate>Mon, 15 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[MSFvenom Cheat Sheet]]></title>
      <description><![CDATA[Enhanced, practical msfvenom reference covering payload generation across all platforms, staged vs stageless selection, encoding, encryption, bad-character handling, template injection, advanced handlers, and real-world delivery techniques.]]></description>
      <link>https://asbawy.com/cheatsheet/Tools/MSFvenom</link>
      <guid>https://asbawy.com/cheatsheet/Tools/MSFvenom</guid>
      <pubDate>Wed, 10 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[BadSuccessor: dMSA Privilege Escalation in Windows Server 2025]]></title>
      <description><![CDATA[A complete technical breakdown of the BadSuccessor vulnerability in Windows Server 2025, explaining how dMSA migration mechanics can be abused for full domain compromise.]]></description>
      <link>https://asbawy.com/logs/badsuccessor</link>
      <guid>https://asbawy.com/logs/badsuccessor</guid>
      <pubDate>Tue, 09 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Shellcode 101: From Assembly to AV Evasion]]></title>
      <description><![CDATA[Go from zero to exploit-ready: learn how shellcode works, how buffer overflows weaponize it, how to survive null bytes, generate payloads with MSFvenom, and slip past modern AV/EDR. The complete guide for CTF players and Red Teamers.]]></description>
      <link>https://asbawy.com/logs/shellcode101</link>
      <guid>https://asbawy.com/logs/shellcode101</guid>
      <pubDate>Mon, 08 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Shell Upgrade Cheatsheet]]></title>
      <description><![CDATA[Complete guide to upgrading dumb shells to fully interactive TTYs during penetration testing]]></description>
      <link>https://asbawy.com/cheatsheet/linux/Shell_Upgrades</link>
      <guid>https://asbawy.com/cheatsheet/linux/Shell_Upgrades</guid>
      <pubDate>Mon, 08 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Linux Privilege Escalation: Basics & Exploitation]]></title>
      <description><![CDATA[Kill chains for sudo abuse, SUID/capabilities, PATH hijacking, cron exploitation, NFS no_root_squash, and runtime process hunting with pspy. Built for Red Teamers and CTF players who skip the theory.]]></description>
      <link>https://asbawy.com/cheatsheet/linux/privesc-exploitation</link>
      <guid>https://asbawy.com/cheatsheet/linux/privesc-exploitation</guid>
      <pubDate>Sat, 06 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Linux Privilege Escalation: Enumeration Cheatsheet]]></title>
      <description><![CDATA[Copy-paste-ready enumeration commands covering every critical Linux privesc vector — OS, users, network, files, capabilities, and scheduled tasks. Built for Red Teamers, pentesters, and CTF players.]]></description>
      <link>https://asbawy.com/cheatsheet/linux/privesc-enumeration</link>
      <guid>https://asbawy.com/cheatsheet/linux/privesc-enumeration</guid>
      <pubDate>Fri, 05 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[CVE-2026-42945 — NGINX Rift: The 18-Year-Old RCE Hiding in Plain Sight]]></title>
      <description><![CDATA[A critical heap buffer overflow in ngx_http_rewrite_module — hiding since 2008, CVSS 9.2, unauthenticated RCE from a single crafted request.]]></description>
      <link>https://asbawy.com/logs/cve-2026-42945-nginx-rift</link>
      <guid>https://asbawy.com/logs/cve-2026-42945-nginx-rift</guid>
      <pubDate>Thu, 04 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Legacy Lethality: Weaponizing OLE & VBA Macros in the GenAI Era]]></title>
      <description><![CDATA[Enterprise endpoints keep falling to attack primitives from the early 1990s. OLE and VBA macros still dominate initial access because legacy interoperability requirements override security posture. Finance, HR, and operations depend on macro-enabled workflows, and generative AI has collapsed the skill barrier—Q1 2026 telemetry shows over 60% of macro-based malware uses AI-generated obfuscation. This post covers the full attack lifecycle: trigger mechanisms, obfuscation, in-process payload injection, direct syscalls from VBA, XLM abuse, OLE weaponization without macros, and the CVE-2026-21509 kill-bit bypass.]]></description>
      <link>https://asbawy.com/logs/weaponizing-ole-vba-macros</link>
      <guid>https://asbawy.com/logs/weaponizing-ole-vba-macros</guid>
      <pubDate>Wed, 03 Jun 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Hijacking Grammarly Desktop: How a Missing DLL Leads to Silent Code Execution]]></title>
      <description><![CDATA[Grammarly Desktop is a widely used writing assistant that runs in the background on Windows, checking grammar and spelling across applications. The application runs as a trusted, signed binary. We found that Grammarly Desktop loads several Windows system libraries from its own local application folder instead of from protected system directories. Because this folder lives inside the user's AppData directory, any code running as that user can place a malicious DLL file there. When Grammarly starts, it loads and executes the attacker's code with the same privileges as the logged-in user. This post explains how the vulnerability works, demonstrates three proof-of-concept attacks, and discusses how to fix the underlying flaw.]]></description>
      <link>https://asbawy.com/logs/grammarly-dll-hijacking-blog</link>
      <guid>https://asbawy.com/logs/grammarly-dll-hijacking-blog</guid>
      <pubDate>Thu, 28 May 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Data Exfiltration Guide]]></title>
      <description><![CDATA[A comprehensive red-team reference covering data exfiltration techniques across TCP, SSH, HTTP/HTTPS, ICMP, and DNS — including advanced IP-over-DNS tunneling with Iodine and HTTP tunneling with Neo-reGeorg — with operational security notes and detection guidance for each method.]]></description>
      <link>https://asbawy.com/logs/data-exfiltration-guide</link>
      <guid>https://asbawy.com/logs/data-exfiltration-guide</guid>
      <pubDate>Wed, 13 May 2026 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[CVE-2021-43798 Grafana Directory Traversal Deep Dive]]></title>
      <description><![CDATA[Deep dive into CVE-2021-43798 — unauthenticated directory traversal in Grafana 8.x via /public/plugins/. Covers root cause, manual exploitation, URL normalization pitfalls, high-value loot targets, and automation with GrafTraverse.]]></description>
      <link>https://asbawy.com/logs/cve-2021-43798-grafana-directory-traversal</link>
      <guid>https://asbawy.com/logs/cve-2021-43798-grafana-directory-traversal</guid>
      <pubDate>Thu, 12 Jan 2023 00:00:00 GMT</pubDate>
    </item>
  
  </channel>
</rss>