CHW Cybersecurity Blog and Portfolio
Welcome to CHW World
█
A party engineer named CHW (ID: chw41) specializing in
Web Security, Penetration Testing, and
Red Teaming.
Currently an active member of the CTF teams 竹狐 (TakeKitsune) and i'm downQQ , and a second-cohort Master’s graduate of is1ab (Information Security Laboratory).
Holds OSEP, OSWE, OSWA, OSCP+ certifications, with 2 CVE discoveries.
Work Experience
[OSEP, PEN-300] Instructional notes
OSEP / PEN-300 instructional notes covering antivirus evasion, application whitelisting and AppLocker bypass, process injection and migration, reflective code execution, client-side and Office macro attacks, JScript/C#/PowerShell shellcode runners, AMSI and UAC bypass, and the defensive mechanisms modern Windows environments rely on.
[OSEP, PEN-300] Instructional notes - Part 4
OSEP PEN-300 筆記 Part 4，整理 Advanced Antivirus Evasion、AMSI 掃描機制、Intel x86/x64 組合語言與 WinDbg 操作、Frida hooking、以 Reflection 與 binary patching 繞過 PowerShell AMSI、amsiInitFailed 與 VirtualProtect patch、FodHelper UAC Bypass、JScript 透過 Registry 與 DLL hijacking 繞過 AMSI 等等。
[OSEP, PEN-300] Instructional notes - Part 3
OSWE PEN-300 筆記 Part 3，整理 Process Injection、DLL Injection、Reflective DLL Injection、Process Hollowing、Antivirus Evasion、VBA Macro、PowerShell 與 Windows API 規避技術等等。
[OSEP, PEN-300] Instructional notes - Part 2
OSWE PEN-300 筆記 Part 2，涵蓋 JScript Phishing、DotNetToJScript、C# Shellcode Runner、SharpShooter、PowerShell Reflection、Win32 API 與 Reflective C# Client-Side Attacks 等等。
[OSEP, PEN-300] Instructional notes - Part 1
OSWE PEN-300 筆記 Part 1，涵蓋 Compiled/Interpreted Language 與 .NET 基礎、Win32 API、Office VBA Macro、PowerShell Shellcode Runner、記憶體內執行與 Calendar Phishing 等等。