--- title: "ZeroTrust Ops (@Zer0Trust) | Hashnode" description: "ZeroTrust Ops (@Zer0Trust) writes on Hashnode. Read their latest articles and follow their work." url: "https://hashnode.com/@Zer0Trust" --- @Zer0Trust # ZeroTrust Ops @Zer0Trust · Toronto, ON · Joined December 2025 ### [My First Hands-On Threat Hunting Workshop Experience with Intel 471: Hunting CVE-2023-46604 from Curiosity to Confidence](https://navyacyber.hashnode.dev/my-first-hands-on-threat-hunting-workshop-experience-with-intel-471-hunting-cve-2023-46604-from-curiosity-to-confidence?utm_source=hashnode&utm_medium=feed) Workshop Overview — Hands-on Environment & Goals 10 min read · [navyacyber.hashnode.dev](https://navyacyber.hashnode.dev/my-first-hands-on-threat-hunting-workshop-experience-with-intel-471-hunting-cve-2023-46604-from-curiosity-to-confidence?utm_source=hashnode&utm_medium=feed) [Apr 30](https://hashnode.com/posts/my-first-hands-on-threat-hunting-workshop-experience-with-intel-471-hunting-cve-2023-46604-from-curiosity-to-confidence/69f2db606e0124c05ea487b2) ### [Day 24: Exploitation with cURL — Hoperation Eggsploit](https://navyacyber.hashnode.dev/day-24-exploitation-with-curl-hoperation-eggsploit?utm_source=hashnode&utm_medium=feed) Master web exploitation using cURL in Day 24. Learn POST requests, session management, and Bash automation to shut down the wormhole. 2 min read · [navyacyber.hashnode.dev](https://navyacyber.hashnode.dev/day-24-exploitation-with-curl-hoperation-eggsploit?utm_source=hashnode&utm_medium=feed) [Jan 1](https://hashnode.com/posts/day-24-exploitation-with-curl-hoperation-eggsploit/6955daa303c6171dfdbb064d) ### [Day 23: AWS Security – S3cret Santa](https://navyacyber.hashnode.dev/day-23-aws-security-s3cret-santa?utm_source=hashnode&utm_medium=feed) Learn to enumerate AWS accounts, exploit IAM misconfigurations, and assume roles to access S3 buckets in Day 23 of the Advent of Cyber. 3 min read · [navyacyber.hashnode.dev](https://navyacyber.hashnode.dev/day-23-aws-security-s3cret-santa?utm_source=hashnode&utm_medium=feed) [Jan 1](https://hashnode.com/posts/day-23-aws-security-s3cret-santa/6955d953bb8188a5473cbfdf) ### [Day 22: Command & Carol — Hunting King Malhare with Rita C2 Detection](https://navyacyber.hashnode.dev/day-22-command-and-carol-hunting-king-malhare-with-rita-c2-detection?utm_source=hashnode&utm_medium=feed) Master C2 detection in Day 22 of Advent of Cyber. Learn to use Rita and Zeke logs to uncover periodic beacons and identify compromised hosts in the TBFC net 3 min read · [navyacyber.hashnode.dev](https://navyacyber.hashnode.dev/day-22-command-and-carol-hunting-king-malhare-with-rita-c2-detection?utm_source=hashnode&utm_medium=feed) [Jan 1](https://hashnode.com/posts/day-22-command-and-carol-hunting-king-malhare-with-rita-c2-detection/6955d8130e5b212549b29906) ### [Day 21: Malware Analysis — Malhare.exe](https://navyacyber.hashnode.dev/day-21-malware-analysis-malhareexe?utm_source=hashnode&utm_medium=feed) To deobfuscate Base64 and ROT13 layers in King Malhare’s "Salary Survey" exploit. 3 min read · [navyacyber.hashnode.dev](https://navyacyber.hashnode.dev/day-21-malware-analysis-malhareexe?utm_source=hashnode&utm_medium=feed) [Jan 1](https://hashnode.com/posts/day-21-malware-analysis-malhareexe/6955ca09cb670912b151d208)