One researcher. The desk is the lab.
abraxas. Abraxas Labs is the desk I write from — not a crew, not a firm, not a committee. If a write-up is here, I wrote it.
I look for things that are still interesting after the press release: 0-days, n-days, malware that still has teeth, leftover primitives, ugly compositions. Grey-hat on purpose. I do not sell access, and I do not pretend that “signed” means “reviewed.”
Disclosure is a process. Analysis is the product. If you are a vendor and I have something that belongs to you, we will talk. If you are reading for the work, the interesting part is rarely the CVE string.
0-day and n-day analysis — whatever I find, whenever it is worth the ink
Malware reverse-engineering: loaders, C2, persistence, host fitness
Composition notes — how boring bugs become SYSTEM
Anything else that does not fit a tidy label
GitHub is github.com/abraxas. Mail lands at abraxas.null@proton.me.
Research published here is for defensive awareness and authorized testing only. If you need a shell, write your own. If you need the write-up, you are in the right place.
Browse research→