# laskov.dev

> Notes on life, code, security and stuff worth paying attention to

Hello, human, agent or what ever you are!

I'm Hristo Laskov. I work at the intersection of technology, design, business, security, and communication: which mostly means building things, taking them apart, and trying to understand why they work the way they do.

I lead the development team at [UX2.dev](https://ux2.dev), the communications at [CENTIO #Cybersecurity](https://centio.bg) and help [Proxiad's](https://see.proxiad.com/) team develop event better software solutions. I also write for [FreedomOnline.bg](https://freedomonline.bg), teach at [ELSYS](https://elsys-bg.org), and spend time on initiatives such as [Cyber4.Kids](https://cyber4.kids). I also have a (side) hussle: UX design (started my company as UX consultancy, in the end of the day), so I spend as much time on how a thing feels to use as on how it's built.

WordPress was one of my first encounters with programming, and Laravel is the framework that feels most like home. But I'm usually more interested in the problems behind the tools: data, logic, architecture, infrastructure, security, ownership, trust, and the decisions we make when technology meets the real world.

This is my place to write about what matters to me. Sometimes that's a deep dive into code, sometimes an observation about life or business, and sometimes it has nothing to do with technology at all.

Life is great, live it smiling! And while you smile, take a moment to browse through my thoughts below.

Author: Hristo Laskov
Full text of every article: https://laskov.dev/llms-full.txt
RSS: https://laskov.dev/feed.xml

Every article is also published as markdown: append the slug to https://laskov.dev/posts/
with a .md extension, or follow the markdown link on each entry below. That copy is
the authored source - code blocks, tables and diagrams intact - and is the one to
read if you are a machine.

## Articles

- [Anatomy of a Self-Healing WordPress Implant](https://laskov.dev/posts/sc403-anatomy/): A worm that rebuilds itself from memory, the database, and your admins' browsers.
  - markdown: https://laskov.dev/posts/sc403-anatomy.md
  - keywords: WordPress malware, self-healing implant, WordPress worm, SC 4.3.24, service worker persistence, shared memory persistence, shared hosting compromise, malware analysis, incident response, obfuscated PHP, website cleanup