https://mahdi-hsz.github.io/A minimal, responsive and feature-rich Jekyll theme for technical writing. 2026-10-04T17:48:31+00:00 Mahdi Hasanzadeh https://mahdi-hsz.github.io/ Jekyll © 2026 Mahdi Hasanzadeh /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-10-01T21:30:00+00:00 2026-10-01T21:30:00+00:00 https://mahdi-hsz.github.io/posts/Bypassing-Snort/ Mahdi Hasanzadeh

Introduction Most of today’s corporations rely on hybrid protection mechanisms to deal with threats and recognize their patterns. One of these assets in network security is known as IDS/IPS (Intrusion Detection & Prevention System), which can be used to intercept inbound and outbound traffic to detect malicious activity and prevent it if necessary. But there’s a catch. Just like any other ...

2026-09-04T02:10:00+00:00 2026-09-04T02:10:00+00:00 https://mahdi-hsz.github.io/posts/leveraging-autoit/ Mahdi Hasanzadeh

Introduction In today’s digital era, various tools and frameworks are built to satisfy the needs of IT administrators and solve operative issues. As an example, most tasks in corporations require constant configuration on systems and servers, but to make it efficient, technicians often use automation solutions to cut time and apply changes on multiple clients. One of the most common ways to do...

2026-08-22T17:10:00+00:00 2026-08-22T17:10:00+00:00 https://mahdi-hsz.github.io/posts/OneDrive-dllhijacking/ Mahdi Hasanzadeh

Introduction When discussing post-exploitation tradecraft, persistence is one of the most critical phases in any adversary kill chain. Gaining initial access is only half the battle — maintaining that access when the target reboots, logs off, or discovers the intrusion is where the real art of Red Teaming shines. In this article, we’ll explore a highly effective persistence technique that abu...

2026-08-15T02:00:00+00:00 2026-10-04T17:47:41+00:00 https://mahdi-hsz.github.io/posts/weaponizing-msi-installer/ Mahdi Hasanzadeh

Introduction Throughout this article, we’ll be examining one of the most common yet hazardous techniques adversaries employ to deliver their payloads and establish reliable access to their targets. This is achieved by altering legitimate MSI packages and injecting malicious payloads using custom actions. This method proves exceptionally effective because it leverages the native Windows Install...

2026-08-09T02:00:00+00:00 2026-08-10T08:52:58+00:00 https://mahdi-hsz.github.io/posts/initial-access-mshta/ Mahdi Hasanzadeh

Introduction : In this article, we’re going to be exploring one of the common attack vectors in adversary scenarios. The core concept of this technique relies on social engineering and payload execution using trusted Windows utilities like mshta.exe (Microsoft HTML Application), which allows the user to execute sources that are built entirely of HTML/CSS/JS and VBScript as an autonomous applic...