02About

One researcher. The desk is the lab.

abraxas. Abraxas Labs is the desk I write from — not a crew, not a firm, not a committee. If a write-up is here, I wrote it.

I look for things that are still interesting after the press release: 0-days, n-days, malware that still has teeth, leftover primitives, ugly compositions. Grey-hat on purpose. I do not sell access, and I do not pretend that “signed” means “reviewed.”

Disclosure is a process. Analysis is the product. If you are a vendor and I have something that belongs to you, we will talk. If you are reading for the work, the interesting part is rarely the CVE string.
Focus

0-day and n-day analysis — whatever I find, whenever it is worth the ink

Focus

Malware reverse-engineering: loaders, C2, persistence, host fitness

Focus

Composition notes — how boring bugs become SYSTEM

Focus

Anything else that does not fit a tidy label

Contact

GitHub is github.com/abraxas. Mail lands at abraxas.null@proton.me.

Research published here is for defensive awareness and authorized testing only. If you need a shell, write your own. If you need the write-up, you are in the right place.

Browse research

Under Contruction (Beta) - No Bully, Please 😊