Profile

xenon | Application Security Researcher

xen@localhost: ~

$ whoami

Red Teamer, Web application security researcher

$ ls

total 16

drwxrwxr-x 4 xen xen 4096 Mar 13 08:43 .

drwxrwxr-x 3 xen xen 4096 Mar 13 08:42 ..

drwxrwxr-x 2 xen xen 4096 Mar 13 08:43 blog

drwxrwxr-x 2 xen xen 4096 Mar 13 08:43 contact

$ _

Xen C2 Framework

Xen C2 is a stealthy post-exploitation framework that leverages an HTA implant to communicate with compromised hosts called agents using HTTPS. It loads modules in-memory which written in C++.

This framework uses a single HTTP connection with multiple streams aka HTTP Multiplexing.

Featured Blogs

Genetec CVE-2026-65422

Genetec CVE-2026-65422

A 0-Day vulnerability analysis in Genetec Security Center Media Gateway API.

In June 2026 me and my colleague found a missing-authorization bug in Genetec Security Center's Media Gateway. that let a low-privileged account/read-only account pull a live video playback and download archived videos.

Read Full Analysis →