Internals on MrAzoth https://az0th.it/tags/internals/ Recent content in Internals on MrAzoth Hugo -- 0.154.5 en-us Sat, 28 Mar 2026 00:00:00 +0000 PPID Spoofing and Stomping — Process Injection Framework https://az0th.it/projects/ppid-and-stomping/ Sat, 28 Mar 2026 00:00:00 +0000 https://az0th.it/projects/ppid-and-stomping/ Combining PPID Spoofing, Module Stomping, RC4 encryption, and native NT API enumeration into a single injection framework — built from scratch to understand how modern evasion techniques work under the hood. Backdooring PuTTY — PE Injection & C2 Beacon Delivery https://az0th.it/projects/backdooring-putty/ Sun, 08 Mar 2026 00:00:00 +0000 https://az0th.it/projects/backdooring-putty/ Manual PE backdooring from scratch: code cave injection, new section addition, XOR evasion, and Adaptix C2 beacon delivery inside a legitimate PuTTY binary. Walking the PE — Static Analyzer & PEB Walker https://az0th.it/projects/walking-the-pe/ Fri, 06 Mar 2026 00:00:00 +0000 https://az0th.it/projects/walking-the-pe/ Deep dive into the Windows PE file format and runtime process inspection via PEB walking — parsing headers, import/export tables, and the loader module list.