I’m Abdelhamid (aka Primo), a security researcher and developer.
Security Researcher & Developer
01 Latest Posts
No writeups published yet — technical posts are on the way.
Browse projects instead →02 Recent ProjectsView all →
DemonLdr
A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace.
ExecuteAssemblyPICO
A Position Independent Code (PIC) implementation of the execute-assembly command, using Crysta Palace linker.
TinyC2
Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.
KMDLLInjector
How does EDRs inject their hooking DLL into a user mode process? KMDLLInjector was the answer for this quetion