<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>/posts/evading-static-analysis/</loc>
<lastmod>2025-08-14T20:48:03+00:00</lastmod>
</url>
<url>
<loc>/posts/shellcode-part-1-finding-module-address/</loc>
<lastmod>2025-08-14T20:48:11+00:00</lastmod>
</url>
<url>
<loc>/posts/shellcode-part-2-finding-exported-functions/</loc>
<lastmod>2024-05-21T06:10:00+00:00</lastmod>
</url>
<url>
<loc>/posts/shellcode-pt3-reverse-shell/</loc>
<lastmod>2024-05-23T03:33:00+00:00</lastmod>
</url>
<url>
<loc>/posts/shellcode-pt4-stager-local-inject-fibers/</loc>
<lastmod>2024-11-05T07:57:32+00:00</lastmod>
</url>
<url>
<loc>/posts/reflective-dll-injection/</loc>
<lastmod>2025-01-13T04:46:23+00:00</lastmod>
</url>
<url>
<loc>/posts/shellcode-reflective-dll-injection/</loc>
<lastmod>2024-10-25T09:29:52+00:00</lastmod>
</url>
<url>
<loc>/posts/sideloading-proxying-custom-software/</loc>
<lastmod>2025-07-01T03:52:26+00:00</lastmod>
</url>
<url>
<loc>/posts/sleep-obf-foliage/</loc>
<lastmod>2025-01-11T05:48:35+00:00</lastmod>
</url>
<url>
<loc>/posts/advanced-module-stomping-heap-stack-enc/</loc>
<lastmod>2025-04-07T06:22:25+00:00</lastmod>
</url>
<url>
<loc>/posts/detecting-syscalls/</loc>
<lastmod>2025-08-14T20:45:59+00:00</lastmod>
</url>
<url>
<loc>/categories/</loc>
<lastmod>2025-09-01T19:05:50+00:00</lastmod>
</url>
<url>
<loc>/tags/</loc>
<lastmod>2025-09-01T19:05:50+00:00</lastmod>
</url>
<url>
<loc>/archives/</loc>
<lastmod>2025-09-01T19:05:50+00:00</lastmod>
</url>
<url>
<loc>/about/</loc>
<lastmod>2025-09-01T19:05:50+00:00</lastmod>
</url>
<url>
<loc>/</loc>
</url>
<url>
<loc>/tags/windows/</loc>
</url>
<url>
<loc>/categories/malware-development/</loc>
</url>
<url>
<loc>/categories/detection-engineering/</loc>
</url>
<url>
<loc>/page2/</loc>
</url>
</urlset>
