Vulnerability research, red team tradecraft, and writeups. Full exploit chains and the occasional postmortem of a bug that turned out to be me.https://staging.donasako.fr/en-ushttps://staging.donasako.fr/articles/cve-2026-31337-heap-overflow/https://staging.donasako.fr/articles/cve-2026-31337-heap-overflow/Three months of static analysis for a pre-auth RCE. The vendor's advisory called it a stability improvement.Sat, 11 Jul 2026 00:00:00 GMTMemory Corruptionheap-overflowpre-auth-rce0-dayexploit-devhttps://staging.donasako.fr/articles/bypassing-edr-by-asking-nicely/https://staging.donasako.fr/articles/bypassing-edr-by-asking-nicely/A study in userland unhooking, and a reminder that trusted process is doing a lot of work in that sentence.Sun, 28 Jun 2026 00:00:00 GMTRed Teamevasionedrhttps://staging.donasako.fr/articles/zero-to-domain-admin/https://staging.donasako.fr/articles/zero-to-domain-admin/An Active Directory chain that is somehow still your problem in 2026.Sun, 14 Jun 2026 00:00:00 GMTActive Directoryprivesckerberoshttps://staging.donasako.fr/articles/reversing-a-sample/https://staging.donasako.fr/articles/reversing-a-sample/Anti-analysis tricks, a packer with self-esteem issues, and one very smug string in the .rdata section.Sat, 30 May 2026 00:00:00 GMTMalwarereversingunpackinghttps://staging.donasako.fr/articles/the-length-field-that-lied/https://staging.donasako.fr/articles/the-length-field-that-lied/A short one about trusting a size you did not compute yourself. Spoiler: don't.Tue, 12 May 2026 00:00:00 GMTMemory Corruptionoob-writeparsinghttps://staging.donasako.fr/articles/race-condition-and-a-bad-decision/https://staging.donasako.fr/articles/race-condition-and-a-bad-decision/Two requests, one balance check, and a coupon system that briefly funded my coffee habit (in staging, relax).Mon, 20 Apr 2026 00:00:00 GMTWebrace-conditionlogic-flaw