rxnveera (@rxnveera) | Hashnode Toggle Sidebar Feed Pro Search Theme Sign in MoreDarkshift - a dark factory for softwareBug0 - The AI-native e2e QA regression testingThe foreword by Hashnode - official blog from the Hashnode teamPassmark - The open-source AI framework for regression testingHashnode gql skill - let your AI agent publish to your Hashnode blogHackathonsChangelogBrand@hashnode on XHashnode on LinkedInSupport - [email protected] of ConductTermsPrivacySitemap Search Hashnode Search posts, tags, users, and pages @rxnveera rxnveera @rxnveera·Joined December 2025 Offensive Security on the windows stack Share About Nothing here yet. Available for Nothing here yet. rxnveera's blogs rxnveera.blogrxnveera.blog6 posts Cryptographycryptography-basics-part1.hashnode.dev1 post About Nothing here yet. Available for Nothing here yet. rxnveera's blogs rxnveera.blogrxnveera.blog6 posts Cryptographycryptography-basics-part1.hashnode.dev1 post ArticlesComments Recently published Rrxnveerainrxnveera.blog·16h ago · 13 min read The Seclogon Shortcut — Spawning SYSTEM Processes via CreateProcessWithTokenW How a built-in Windows service does the dirty work for you — converting Impersonation tokens to Primary tokens behind the scenes, letting you spawn processes as SYSTEM with fewer privileges and less c 10 Rrxnveerainrxnveera.blog·Aug 8 · 17 min read Born With a Stolen Soul — Spawning Processes With Swapped Identities via NtSetInformationProcess How we create a legitimate Windows process, replace its identity before it executes a single instruction, and wake it up as SYSTEM — invisible to most EDR process creation hooks. Introduction — What E 00 Rrxnveerainrxnveera.blog·Jul 29 · 8 min read The Silent Recon - Why Malware Authors Choose RID Cycling When an attacker lands a foothold on a Windows machine, their absolute first priority is discovery. They need to answer one crucial question: Who else is on this box? Finding local accounts—especially 21N Rrxnveerainrxnveera.blog·Jul 21 · 4 min read Understanding Process Isolation in Windows Let's break down how two processes communicate in Windows, what process isolation means, and how APIs like WriteProcessMemory and VirtualAllocEx manage to access another process's memory — without bre 00 Rrxnveerainrxnveera.blog·Jul 21 · 1 min read Loader Lock what is loader lock ? Loader Lock is a special internal lock , windows holds while loading or unloading DLLs So Windows restricts these operations inside DllMain to avoid deadlocks or hangs. So DLL Si 00 Load more