Brewing Your Own Offensive Coding Assistant: Fine-Tuning a Local LLM
A practitioner's walkthrough of QLoRA fine-tuning a local coding model with Unsloth, evaluating it, and deploying it through Ollama.
Brew Coffee
Independent offensive security research
Field notes on adversary tradecraft, malware development, red team operations, and applied AI.
Featured research Red Team
RegisterXLL After the Gate: Testing Excel's XLL Security Boundary
How Excel's RegisterXLL automation method loads native add-in code through a path that did not enforce the MOTW and extension checks observed in the interactive UI.
Read the researchResearch log
Latest field notes
VibeLoader: Loading for Fun and No Profit
An implementation-focused walkthrough of VibeLoader's APC, fiber, module-stomping, payload-encoding, and memory-management experiments.
Using AWS Lambda as a C2 Redirector
How to route authorized C2 traffic through API Gateway and AWS Lambda while keeping the team server behind controlled egress.
Modern C2 Usage: Frameworks, Tradecraft, and Infrastructure
A practical overview of modern command and control frameworks, infrastructure design, and operational tradecraft for red team engagements.
Welcome to BrewCoffee Offensive Security Blog
Introducing this blog - a space for offensive security research, penetration testing techniques, and red team operations.