May 3, 2026 3 min read
Bypassing Single-Instance Checks: Mutex Manipulation with HueSyncPatch
A technical look at manipulating NT handles to bypass application single-instance enforcement, from an EDR and threat hunting perspective.
Blog Archive
Technical writing and research notes.
Long-form writing on Windows internals, reverse engineering, firmware emulation, and security engineering.
Browse by Tag
May 3, 2026 2 min read
Compile-Time Polymorphism for Evasion: Inside ObfTypes
Exploring a C++26 approach to anti-analysis and signature evasion using compile-time variant dispatch and SIMD.
March 23, 2026 9 min read
How I Found 3 Router 0-Days and Built an AI-Assisted Firmware Emulation Platform
A disclosure-safe look at using rootless Podman, QEMU user-mode, and AI automation to bring up router firmware in WSL, work through the ugly realities of embedded userspace, and turn 3 findings into a repeatable testing platform.