Featured write-up
Reversing WannaCry
Using Ghidra to disassemble the WannaCry ransomware and hunt for the infamous killswitch URL that halted its 2017 rampage — then tracing the entry point, service creation, and propagation path down to EternalBlue.