{"title":"Blacklight Inspection","page_title":"Affordable Malware RE Training | 0ffset Training Solutions","uri_ins":"http://www.0ffset.net/","uri_dest":"https://www.0ffset.net/","uri_redirects":["http://www.0ffset.net/"],"secure_connection":{},"host":"www.0ffset.net","config":{"emulateDevice":{"name":"iPhone 13 Pro","userAgent":"Mozilla/5.0 (iPhone; CPU iPhone OS 15_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Mobile/15E148 Safari/604.1","viewport":{"width":390,"height":844,"deviceScaleFactor":3,"isMobile":true,"hasTouch":true,"isLandscape":false}},"cleareCache":true,"captureHar":true,"captureLinks":false,"enableAdBlock":false,"saveBrowserProfile":false,"numPages":2,"defaultTimeout":35000,"defaultWaitUntil":"networkidle2","headless":true,"headers":{},"extraChromiumArgs":["--disable-features=TrackingProtection3pcd","--website-analysis-scan=4c4903c1-3a2c-4206-bded-ef10e370558d"],"extraPuppeteerOptions":{}},"browser":{"name":"Chromium","version":"Chrome/127.0.6533.88","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/127.0.0.0 Safari/537.36","platform":{"name":"Linux","version":"4.4.302+"}},"script":{"host":"f55531b6c604","version":{"npm":"3.11.0","commit":"dev"},"node_version":"v24.20.0"},"start_time":"2026-09-12T20:09:38.012Z","end_time":"2026-09-12T20:10:03.380Z","browsing_history":["https://www.0ffset.net/","https://www.0ffset.net/reverse-engineering/identifying-xrefs-with-capstone/","https://www.0ffset.net/reverse-engineering/analysing-the-main-bazarloader/"],"hosts":{"requests":{"first_party":["www.0ffset.net"],"third_party":["fonts.googleapis.com","www.googletagmanager.com","img1.wsimg.com","fonts.gstatic.com","region1.google-analytics.com","csp.secureserver.net"]}},"reports":{"behaviour_event_listeners":{"MOUSE":{"https://www.googletagmanager.com/gtag/js?id=G-YMWBZT97CQ":["click"],"https://img1.wsimg.com/traffic-assets/js/tccl-tti.min.js":["click"],"https://www.0ffset.net/reverse-engineering/analysing-the-main-bazarloader/":["click"],"https://www.0ffset.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1":["scroll","click","mousemove"],"https://www.0ffset.net/reverse-engineering/identifying-xrefs-with-capstone/":["click"],"https://www.0ffset.net/":["click"]},"KEYBOARD":{"https://img1.wsimg.com/traffic-assets/js/tccl-tti.min.js":["keydown"]},"TOUCH":{"https://www.0ffset.net/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.7":["touchmove","touchcancel"],"https://www.0ffset.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1":["touchend","touchstart"]},"SENSOR":{"https://www.0ffset.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1":["orientationchange"],"https://www.0ffset.net/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.7":["orientationchange"]}},"canvas_fingerprinters":{"data_url":{},"fingerprinters":[],"styles":{},"texts":{}},"canvas_font_fingerprinters":{"canvas_font":{},"text_measure":{}},"cookies":[{"name":"__cf_bm","value":"L01UKYZXJRpVU4vDRt07NGv7lOFEc8n69GO3EXnD8cs-1789243797.9612927-1.0.1.1-YIjU38PYAYfemmwL5r9KCEiSwpDquV0eCADc4fFA5TKGKLB3EpunkXpP7RZ8WqZi9529bAkla86WzY_3HTVJfMt4fMWzz5dhzMoPJQxXpOam6Sp6n2rpY6xgfdZTEYvW","domain":"www.0ffset.net","path":"/","expires":"2026-09-12T20:39:57.989Z","size":206,"httpOnly":true,"secure":true,"session":false,"sameSite":"None","priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"unknown","third_party":false},{"name":"sbjs_migrations","value":"1418474375998%3D1","domain":"0ffset.net","path":"/","expires":-1,"size":32,"httpOnly":false,"secure":false,"session":true,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"sbjs_current_add","value":"fd%3D2026-09-12%2020%3A09%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fwww.0ffset.net%2Freverse-engineering%2Fanalysing-the-main-bazarloader%2F%7C%7C%7Crf%3D%28none%29","domain":"0ffset.net","path":"/","expires":-1,"size":170,"httpOnly":false,"secure":false,"session":true,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"sbjs_first_add","value":"fd%3D2026-09-12%2020%3A09%3A59%7C%7C%7Cep%3Dhttps%3A%2F%2Fwww.0ffset.net%2Freverse-engineering%2Fanalysing-the-main-bazarloader%2F%7C%7C%7Crf%3D%28none%29","domain":"0ffset.net","path":"/","expires":-1,"size":168,"httpOnly":false,"secure":false,"session":true,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29","domain":"0ffset.net","path":"/","expires":-1,"size":250,"httpOnly":false,"secure":false,"session":true,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29","domain":"0ffset.net","path":"/","expires":-1,"size":248,"httpOnly":false,"secure":false,"session":true,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28iPhone%3B%20CPU%20iPhone%20OS%2015_0%20like%20Mac%20OS%20X%29%20AppleWebKit%2F605.1.15%20%28KHTML%2C%20like%20Gecko%29%20Version%2F15.4%20Mobile%2F15E148%20Safari%2F604.1","domain":"0ffset.net","path":"/","expires":-1,"size":246,"httpOnly":false,"secure":false,"session":true,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fwww.0ffset.net%2Freverse-engineering%2Fanalysing-the-main-bazarloader%2F","domain":"0ffset.net","path":"/","expires":"2026-09-12T20:39:59.000Z","size":120,"httpOnly":false,"secure":false,"session":false,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"_ga_YMWBZT97CQ","value":"GS2.1.s1789243799$o1$g0$t1789243799$j60$l0$h0","domain":"0ffset.net","path":"/","expires":"2027-10-17T20:09:59.827Z","size":59,"httpOnly":false,"secure":false,"session":false,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"_ga","value":"GA1.1.1125883262.1789243800","domain":"0ffset.net","path":"/","expires":"2027-10-17T20:09:59.832Z","size":30,"httpOnly":false,"secure":false,"session":false,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"_tccl_visitor","value":"ad1c466e-2fef-4e8f-a098-f53af3bfef41","domain":"0ffset.net","path":"/","expires":"2027-09-12T20:09:59.000Z","size":49,"httpOnly":false,"secure":true,"session":false,"sameSite":"None","priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"unknown","third_party":false},{"name":"_tccl_visit","value":"ad1c466e-2fef-4e8f-a098-f53af3bfef41","domain":"0ffset.net","path":"/","expires":"2026-09-12T20:39:59.000Z","size":47,"httpOnly":false,"secure":true,"session":false,"sameSite":"None","priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"unknown","third_party":false},{"name":"_scc_session","value":"pc=1&C_TOUCH=2026-09-12T20:09:59.871Z","domain":"0ffset.net","path":"/","expires":"2026-09-12T20:29:59.000Z","size":49,"httpOnly":false,"secure":true,"session":false,"sameSite":"None","priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"unknown","third_party":false}],"fb_pixel_events":[],"tiktok_pixel_events":[],"twitter_pixel_events":[],"google_analytics_events":[],"key_logging":{},"session_recorders":{},"third_party_trackers":[{"data":{"body":{},"filter":"||google-analytics.com^$third-party","listName":"easyprivacy.txt","query":{"_ee":1,"_fv":1,"_nsi":1,"_p":1789243798659,"_s":1,"_ss":1,"are":1,"cid":1125883262.1789243,"dl":"https://www.0ffset.net/reverse-engineering/analysing-the-main-bazarloader/","dma":1,"dma_cps":"a","dt":"BAZARLOADER: Analysing The Main Loader | 0ffset Training Solutions","en":"page_view","frm":0,"gap.plf":"4.5.3","gcd":"13l3l3l2l1l1","gtm":"45je6992v897754925za200zd897754925","ngs":1,"npa":1,"pscdl":"","rcb":8,"sct":1,"seg":0,"sid":1789243799,"sr":"390x844","tag_exp":"115616985~115938465~115938468~118897920~118897930~120213116~120385423~120469145~120469153","tfd":2007,"tid":"G-YMWBZT97CQ","uaa":"","uab":"","uafvl":"","uam":"","uamb":0,"uap":"","uapv":"","uaw":0,"ul":"en-us","v":2}},"stack":[{"fileName":"https://www.0ffset.net/reverse-engineering/analysing-the-main-bazarloader/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://region1.google-analytics.com/g/collect?v=2&tid=G-YMWBZT97CQ&gtm=45je6992v897754925za200zd897754925&_p=1789243798659&gcd=13l3l3l2l1l1&npa=1&dma_cps=a&dma=1&are=1&cid=1125883262.1789243800&frm=0&ngs=1&pscdl=&rcb=8&sr=390x844&uaa=&uab=&uafvl=&uam=&uamb=0&uap=&uapv=&uaw=0&ul=en-us&_s=1&tag_exp=115616985~115938465~115938468~118897920~118897930~120213116~120385423~120469145~120469153&sid=1789243799&sct=1&seg=0&dl=https%3A%2F%2Fwww.0ffset.net%2Freverse-engineering%2Fanalysing-the-main-bazarloader%2F&dt=BAZARLOADER%3A%20Analysing%20The%20Main%20Loader%20%7C%200ffset%20Training%20Solutions&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&gap.plf=4.5.3&tfd=2007"},{"data":{"body":{},"filter":"||googletagmanager.com^","listName":"easyprivacy.txt","query":{"id":"G-YMWBZT97CQ"}},"stack":[{"fileName":"https://www.0ffset.net/reverse-engineering/analysing-the-main-bazarloader/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.googletagmanager.com/gtag/js?id=G-YMWBZT97CQ"},{"data":{"body":{},"filter":"||google-analytics.com^$third-party","listName":"easyprivacy.txt","query":{"_ee":1,"_fv":1,"_nsi":1,"_p":1789243792620,"_s":1,"_ss":1,"are":1,"cid":142624043.17892438,"dl":"https://www.0ffset.net/reverse-engineering/identifying-xrefs-with-capstone/","dma":1,"dma_cps":"a","dt":"Identifying X-Refs with Capstone | 0ffset Training Solutions","en":"page_view","frm":0,"gcd":"13l3l3l2l1l1","gtm":"45je6992h1v897754925za200zd897754925","ngs":1,"npa":1,"pscdl":"","rcb":5,"sct":1,"seg":0,"sid":1789243793,"sr":"390x844","tag_exp":"115616986~115938466~115938468~118897920~118897930~120213116~120385423~120469145~120469153~120912438","tfd":1656,"tid":"G-YMWBZT97CQ","uaa":"","uab":"","uafvl":"","uam":"","uamb":0,"uap":"","uapv":"","uaw":0,"ul":"en-us","v":2}},"stack":[{"fileName":"https://www.0ffset.net/reverse-engineering/identifying-xrefs-with-capstone/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://region1.google-analytics.com/g/collect?v=2&tid=G-YMWBZT97CQ&gtm=45je6992h1v897754925za200zd897754925&_p=1789243792620&gcd=13l3l3l2l1l1&npa=1&dma_cps=a&dma=1&are=1&cid=142624043.1789243794&frm=0&ngs=1&pscdl=&rcb=5&sr=390x844&uaa=&uab=&uafvl=&uam=&uamb=0&uap=&uapv=&uaw=0&ul=en-us&_s=1&tag_exp=115616986~115938466~115938468~118897920~118897930~120213116~120385423~120469145~120469153~120912438&sid=1789243793&sct=1&seg=0&dl=https%3A%2F%2Fwww.0ffset.net%2Freverse-engineering%2Fidentifying-xrefs-with-capstone%2F&dt=Identifying%20X-Refs%20with%20Capstone%20%7C%200ffset%20Training%20Solutions&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1656"},{"data":{"body":{},"filter":"||googletagmanager.com^","listName":"easyprivacy.txt","query":{"id":"G-YMWBZT97CQ"}},"stack":[{"fileName":"https://www.0ffset.net/reverse-engineering/identifying-xrefs-with-capstone/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.googletagmanager.com/gtag/js?id=G-YMWBZT97CQ"},{"data":{"body":{},"filter":"||google-analytics.com^$third-party","listName":"easyprivacy.txt","query":{"_ee":1,"_fv":1,"_nsi":1,"_p":1789243784078,"_s":1,"_ss":1,"are":1,"cid":1307383548.1789243,"dl":"https://www.0ffset.net/","dma":1,"dma_cps":"a","dt":"Affordable Malware RE Training | 0ffset Training Solutions","en":"page_view","frm":0,"gcd":"13l3l3l2l1l1","gtm":"45je6992v897754925za200zd897754925","ngs":1,"npa":1,"pscdl":"","rcb":7,"sct":1,"seg":0,"sid":1789243787,"sr":"390x844","tag_exp":"115616986~115938465~115938469~118897920~118897930~120213116~120385422~120469145~120469153","tfd":3759,"tid":"G-YMWBZT97CQ","uaa":"","uab":"","uafvl":"","uam":"","uamb":0,"uap":"","uapv":"","uaw":0,"ul":"en-us","v":2}},"stack":[{"fileName":"https://www.0ffset.net/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://region1.google-analytics.com/g/collect?v=2&tid=G-YMWBZT97CQ&gtm=45je6992v897754925za200zd897754925&_p=1789243784078&gcd=13l3l3l2l1l1&npa=1&dma_cps=a&dma=1&are=1&cid=1307383548.1789243787&frm=0&ngs=1&pscdl=&rcb=7&sr=390x844&uaa=&uab=&uafvl=&uam=&uamb=0&uap=&uapv=&uaw=0&ul=en-us&_s=1&tag_exp=115616986~115938465~115938469~118897920~118897930~120213116~120385422~120469145~120469153&sid=1789243787&sct=1&seg=0&dl=https%3A%2F%2Fwww.0ffset.net%2F&dt=Affordable%20Malware%20RE%20Training%20%7C%200ffset%20Training%20Solutions&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3759"},{"data":{"body":{},"filter":"||googletagmanager.com^","listName":"easyprivacy.txt","query":{"id":"G-YMWBZT97CQ"}},"stack":[{"fileName":"https://www.0ffset.net/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.googletagmanager.com/gtag/js?id=G-YMWBZT97CQ"}]}}