Syscalls

Volatile Storage Mechanisms: A Deep Dive into memfd_create for Memory-Resident Operations

Traditional disk storage leaves traces. memfd_create enables anonymous, volatile files that reside exclusively in RAM. Learn to implement this in x64 Assembly for low-footprint operations.

Linux x64 Assembly: The Anatomy of Syscalls and the Secrets of the .bss Segment

Go behind the scenes of the Linux Kernel. Learn the register protocol for syscalls and why the .bss segment is essential for efficient, zero-disk memory reservation.

ICMP-Ghost: A Technical Analysis of Low-Level Network Communication in x64 Assembly

Meet the ghost in the machine. ICMP-Ghost uses zero-dependency x64 Assembly to bypass EDRs. Learn how fileless execution and ICMP stealth communication work at the syscall level.

Building a Low-Level ICMP Sniffer in x64 Assembly (Raw Sockets)

Scapy or C are easy, but true control lies in the CPU cycles. Learn how to build a raw socket sniffer from scratch in x64 Assembly, bypassing libc for pure kernel interaction.