Research archive

Field notes and technical research

Offensive security, red team infrastructure, malware development, and applied AI.

6 published entries

Aug 13, 2026 11 min

RegisterXLL: Testing Excel's XLL Security Boundary

How Excel's RegisterXLL automation method loads native add-in code through a path that did not enforce the MOTW and extension checks observed in the interactive UI.

excelxllcom +6

Red Team

May 7, 2026 16 min

Brewing Your Own Offensive Coding Assistant: Fine-Tuning a Local LLM

A practitioner's walkthrough of QLoRA fine-tuning a local coding model with Unsloth, evaluating it, and deploying it through Ollama.

aillmfine-tuning +5

Red Team

Apr 6, 2026 8 min

VibeLoader: Loading for Fun and No Profit

An implementation-focused walkthrough of VibeLoader's APC, fiber, module-stomping, payload-encoding, and memory-management experiments.

maldevshellcodeevasion +4

Red Team

Apr 5, 2026 7 min

Using AWS Lambda as a C2 Redirector

How to route authorized C2 traffic through API Gateway and AWS Lambda while keeping the team server behind controlled egress.

c2red-teamaws +4

Red Team

Mar 7, 2026 12 min

Modern C2 Usage: Frameworks, Tradecraft, and Infrastructure

A practical overview of modern command and control frameworks, infrastructure design, and operational tradecraft for red team engagements.

c2red-teamcobalt-strike +6

General

Mar 1, 2026 1 min

Welcome to BrewCoffee Offensive Security Blog

Introducing this blog - a space for offensive security research, penetration testing techniques, and red team operations.

introred-teamoffensive-security