Welcome to 0x90JMP

This blog covers Windows offensive security research - malware development, AV/EDR evasion, Active Directory attack chains, and red team tradecraft.

What to Expect

Category	Topics
Malware Development	Shellcode loaders, injectors, droppers, C2 implants
AV/EDR Bypass	AMSI patching, ETW tampering, hook evasion, MDE research
Active Directory	Kerberos abuse, lateral movement, persistence, LDAP enum
Tools & Tradecraft	Custom tool, technique, OPSEC notes

Lab Setup

Posts will include reproduction steps. Unless noted otherwise, testing is done against:

• Windows 10 / 11 lab with Defender / MDE enabled
• Windows Server
• GOAD2
• Havoc / Sliver C2 frameworks

All research is conducted in authorized lab environments. Nothing here is intended to assist unauthorized access to systems.