xbz0n | Security Research Blog https://xbz0n.sh/blog Security research articles covering penetration testing, exploit development, red team operations, Active Directory attacks, and CVE disclosures by Ivan Spiridonov (xbz0n). en Fri, 12 Jun 2026 08:16:11 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Tracing a Smishing Triad Fake-Fine Campaign Targeting Bulgaria (МВР) https://xbz0n.sh/blog/smishing-triad-mvr-bulgaria https://xbz0n.sh/blog/smishing-triad-mvr-bulgaria Mon, 08 Jun 2026 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) OSINT Threat Intelligence Phishing Smishing Forensics Smishing Triad Incident Response From /monaco to k8s Full Cluster Compromise https://xbz0n.sh/blog/from-monaco-to-k8s-full-cluster-compromise https://xbz0n.sh/blog/from-monaco-to-k8s-full-cluster-compromise Mon, 23 Mar 2026 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Penetration Testing Web Security GraphQL Firebase Kubernetes Source Maps IDOR SSRF IoT Security Cloud Security Extracting a Dead Cult Leader's AI Mind https://xbz0n.sh/blog/extracting-dead-cult-leaders-ai-mind https://xbz0n.sh/blog/extracting-dead-cult-leaders-ai-mind Sun, 15 Feb 2026 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) OSINT CTI AI Security Prompt Injection LLM Security Jailbreak Custom GPT Cult Intelligence Living Off the Land: Windows Post-Exploitation Without Tools https://xbz0n.sh/blog/living-off-the-land-windows https://xbz0n.sh/blog/living-off-the-land-windows Fri, 28 Nov 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Post-Exploitation Windows Red Team PowerShell LOLBins Lateral Movement Offensive Security Finding and Exploiting CVE-2025-50674 in OpenMediaVault https://xbz0n.sh/blog/CVE-2025-50674 https://xbz0n.sh/blog/CVE-2025-50674 Sun, 24 Aug 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Vulnerability Research Privilege Escalation CVE OpenMediaVault Newline Injection Mythic C2 with EarlyBird Injection and Defender Evasion https://xbz0n.sh/blog/mythic-c2-early-bird-defender-evasion https://xbz0n.sh/blog/mythic-c2-early-bird-defender-evasion Mon, 23 Jun 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Red Team C2 Mythic Infrastructure Process Injection EarlyBird OPSEC Malware Development Breaking ADCS: ESC1 to ESC16 Attack Techniques https://xbz0n.sh/blog/adcs-complete-attack-reference https://xbz0n.sh/blog/adcs-complete-attack-reference Tue, 03 Jun 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Active Directory ADCS PKI Privilege Escalation Red Team Certificate Templates ESC16 From Zero Creds to Enterprise Admin https://xbz0n.sh/blog/from-zero-creds-to-ea https://xbz0n.sh/blog/from-zero-creds-to-ea Tue, 20 May 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Active Directory Penetration Testing NTLM Relay SMB DCSync Domain Takeover Network Security XSS to Account Takeover & Data Exfiltration https://xbz0n.sh/blog/XSS-to-Account-Takeover-and-Data-Exfiltration https://xbz0n.sh/blog/XSS-to-Account-Takeover-and-Data-Exfiltration Thu, 24 Apr 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Web Security XSS Account Takeover CSRF Session Riding Data Exfiltration Vulnerability Research VirtualProtect DEP Bypass: Step-By-Step Exploit https://xbz0n.sh/blog/virtualprotect_dep_bypass_guide https://xbz0n.sh/blog/virtualprotect_dep_bypass_guide Tue, 08 Apr 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Exploit Development VulnServer DEP Bypass ROP Buffer Overflow Windows Exploitation Social Engineering in Red Team Operations: Technical Setup and Tools https://xbz0n.sh/blog/social-engineering-redteam https://xbz0n.sh/blog/social-engineering-redteam Tue, 01 Apr 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Red Team Social Engineering Phishing OSINT Infrastructure Offensive Security C2 Redirectors: Advanced Infrastructure for Modern Red Team Operations https://xbz0n.sh/blog/c2-redirectors https://xbz0n.sh/blog/c2-redirectors Tue, 25 Mar 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Red Team C2 Infrastructure OPSEC Network Security Command and Control Mastering x86 Shellcode: A Deep Dive into Calculator-Launching Payload Development https://xbz0n.sh/blog/calculator-shellcode-analysis https://xbz0n.sh/blog/calculator-shellcode-analysis Tue, 18 Mar 2025 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Shellcode Assembly Windows Exploit Development x86 Low-level Programming Finding and Exploiting CVE-2023-0830 in EasyNas https://xbz0n.sh/blog/cve-2023-0830 https://xbz0n.sh/blog/cve-2023-0830 Sat, 18 Mar 2023 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Vulnerability Research Command Injection CVE EasyNAS Exploit Development Privilege Escalation GraphQL PenTest Methodology and Exploitation Techniques https://xbz0n.sh/blog/graphql-security-flaws https://xbz0n.sh/blog/graphql-security-flaws Sat, 18 Mar 2023 00:00:00 GMT ivanspiridonov@gmail.com (Ivan Spiridonov) Web Security GraphQL Penetration Testing API Security Vulnerability Research Exploitation