 _____ ______   ________  _________  ___  ___  _______   ___  ___  ________
|\   _ \  _   \|\   __  \|\___   ___\\  \|\  \|\  ___ \ |\  \|\  \|\_____  \
\ \  \\\__\ \  \ \  \|\  \|___ \  \_\ \  \\\  \ \   __/|\ \  \\\  \\|___/  /|
 \ \  \\|__| \  \ \   __  \   \ \  \ \ \   __  \ \  \_|/_\ \  \\\  \   /  / /
  \ \  \    \ \  \ \  \ \  \   \ \  \ \ \  \ \  \ \  \_|\ \ \  \\\  \ /  /_/__
   \ \__\    \ \__\ \__\ \__\   \ \__\ \ \__\ \__\ \_______\ \_______\\________\
    \|__|     \|__|\|__|\|__|    \|__|  \|__|\|__|\|_______|\|_______|\|_______|

MatheuZ

Red Team Operator, Offensive Security Researcher, and Pentester

My research writeups and tricks

$ ls -t ./hacking # 16 files

2026-09-09 Fileless ELF Execution via Kernel Keyring7 min Fileless Linux Red Team Kernel 2026-09-06 Fileless ELF Execution via O_TMPFILE5 min Fileless EDR Elastic Linux 2026-08-31 Singularity Rootkit: Evading Elastic Defend Module Load Detection6 min EDR Evasion eBPF Elastic Linux 2026-07-06 BPF Map Poisoning: Attacking Falco from the Inside9 min EDR Evasion eBPF Falco Linux 2026-06-03 Trend Micro Deep Security Agent Research: Forcing bmhook/tmhook Reloads to Open a Protection Bypass Window24 min Trend Micro Deep Security Agent Linux Kernel LKM