Sohail Saha
Hacker. Developer. Author. Guitarist.
Beyond NPPSPY: Harvesting Credentials and Bypassing AppLocker & WDAC via Windows Credential Provider Framework
OSEP in 2025 — experience, advice & criticism
Windows Process Cloning — How to dump a process without dumping the process
Ghostly Reflective PE Loader — how to make an existing remote process inject a PE in itself
Ghostly Hollowing — probably the most bizarre Windows process injection technique I know
How to write a local PE Loader from scratch (for educational purposes)
Certified Red Team Operator (CRTO) in 2024 — My review & tips
Voidgate: how to execute shellcode while keeping it encrypted
Using syscalls to bypass User-land EDR hooks
A Gentle Introduction to Syscalls in Windows
API hooking with Detours on Windows
IPFuscation — using IP addresses to obfuscate your sus payloads
Most people on Reddit might not even be people
