1 239
المشتركون
+324 ساعات
+47 أيام
+1230 أيام
جارٍ تحميل البيانات
القنوات المماثلة
سحابة العلامات
لا توجد بيانات
هل تواجه مشاكل؟ يرجى تحديث الصفحة أو الاتصال بمدير الدعم الخاص بنا.
الإشارات الواردة والصادرة
---
---
---
---
---
---
جذب المشتركين
أكتوبر '26أكتوبر '26
أكتوبر '26
+699
في 0 قنوات
سبتمبر '260
في 0 قنوات
Get PRO
أغسطس '260
في 0 قنوات
Get PRO
يوليو '260
في 0 قنوات
Get PRO
يونيو '260
في 0 قنوات
Get PRO
مايو '260
في 0 قنوات
Get PRO
أبريل '260
في 0 قنوات
Get PRO
مارس '260
في 1 قنوات
Get PRO
فبراير '260
في 0 قنوات
Get PRO
يناير '260
في 0 قنوات
Get PRO
ديسمبر '250
في 0 قنوات
Get PRO
نوفمبر '250
في 0 قنوات
Get PRO
أكتوبر '250
في 0 قنوات
Get PRO
سبتمبر '250
في 2 قنوات
Get PRO
أغسطس '250
في 0 قنوات
Get PRO
يوليو '250
في 0 قنوات
Get PRO
يونيو '250
في 0 قنوات
Get PRO
مايو '250
في 1 قنوات
Get PRO
أبريل '250
في 4 قنوات
Get PRO
مارس '250
في 1 قنوات
Get PRO
فبراير '250
في 1 قنوات
Get PRO
يناير '250
في 1 قنوات
Get PRO
ديسمبر '24
+11
في 2 قنوات
Get PRO
نوفمبر '24
+105
في 0 قنوات
Get PRO
أكتوبر '24
+165
في 4 قنوات
Get PRO
سبتمبر '24
+143
في 0 قنوات
Get PRO
أغسطس '240
في 2 قنوات
Get PRO
يوليو '240
في 0 قنوات
Get PRO
يونيو '240
في 1 قنوات
Get PRO
مايو '240
في 0 قنوات
Get PRO
أبريل '240
في 0 قنوات
Get PRO
مارس '240
في 0 قنوات
Get PRO
فبراير '240
في 0 قنوات
Get PRO
يناير '24
+133
في 0 قنوات
| التاريخ | نمو المشتركين | الإشارات | القنوات | |
| 21 أكتوبر | +1 | |||
| 20 أكتوبر | +3 | |||
| 19 أكتوبر | 0 | |||
| 18 أكتوبر | +2 | |||
| 17 أكتوبر | +2 | |||
| 16 أكتوبر | 0 | |||
| 15 أكتوبر | +1 | |||
| 14 أكتوبر | 0 | |||
| 13 أكتوبر | +3 | |||
| 12 أكتوبر | +2 | |||
| 11 أكتوبر | 0 | |||
| 10 أكتوبر | +4 |
منشورات القناة
Agentic Deobfuscation: An Attacker's Playbook
https://github.com/mrphrazer/binary-cartography/tree/main/2026-09-agentic_deobfuscation
Designed for technical security professionals, reverse engineers, and malware analysts working with binaries or low-level software, this webinar focuses on practical workflows for taking obfuscated code apart
@cafe_security
| 2 |  My New Blog Post
Evading Sysmon Dns Monitoring In 2026 | binary-win
DNSevade : https://github.com/binary-win/DNSevade.git
Sysmon gets its DNS telemetry from the Microsoft-Windows-DNS-Client ETW provider.
Let's hide in plain sight.
#sysmon #bypass
Your Notes are HERE | 312 |
| 3 | Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)
https://embracethered.com/blog/posts/2026/pipewire-flatpak-linux-sandbox-escape-cve-2026-5674/
@cafe_security | 782 |
| 4 | volatility3-ai-triage
https://github.com/zyekhabdul/volatility3-ai-triage
volatility3-ai-triage performs high-utility memory triage by executing Volatility 3 plugins in parallel, cross-correlating raw memory artifacts across plugins, detecting advanced 2026 evasion techniques, and generating deterministic SIEM JSON / STIX 2.1 Threat Intel alongside executive Markdown & HTML Triage Reports via Local LLMs (Ollama) or Cloud APIs (Gemini, OpenAI).
@cafe_security | 700 |
| 5 | DCOMIllusionist - Windows fileless latteral movement technique.
https://github.com/synacktiv/DCOMIllusionist
@cafe_security | 867 |
| 6 | The dusk of g_CiOptions: circumventing DSE with VBS enabled
https://blog.cryptoplague.net/main/research/windows-research/the-dusk-of-g_cioptions-circumventing-dse-with-vbs-enabled
#BYOVD
@cafe_security | 823 |
| 7 | Kernel Karnage Part 1: Patching Windows Kernel Callbacks to Disable EDR from a Driver
———————————————————————————-
The first post of NVISO Labs’ Kernel Karnage series walks through the opening move of an EDR-bypass research project: write a small Windows kernel driver, locate the undocumented PspCreateProcessNotifyRoutine callback array that the OS uses to deliver process-creation notifications, and patch the EDR’s registered callback out of it. Process-creation callbacks are one of the load-bearing telemetry mechanisms modern EDR products depend on — remove them and a wide class of behavioural detections go dark.
https://core-jmp.org/2026/06/kernel-karnage-part-1-patching-windows-kernel-callbacks-edr-bypass/
@cafe_security | 650 |
| 8 | Post-patch Postmortem
https://github.com/joshterrill/post-patch-postmortem
@cafe_security | 626 |
| 9 | Token:
eyJ1cmwiOiAiaHR0cHM6Ly9ldWNlMS0xMDkuc2VudGluZWxvbmUubmV0IiwgInNpdGVfa2V5IjogImNkZWIxMGEwYmM4ZGUwMTU3ZjliZGRmNjdkMDJmOTE2NzE0NjMwNzEyNGIxNTlhYzcwZGRmYWI2OGZiYzEzNGEifQ== | 554 |
| 10 | NullPageProtector
This project is essentially a Windows kernel-mode driver designed for Windows 7 and earlier versions. It serves as a mitigation strategy for null pointer dereference vulnerabilities.
https://github.com/binophism/NullPageProtector
@cafe_security | 724 |
| 11 |  #meme
#CFG
#ED
@cafe_security | 828 |
| 12 | RIP RegPwn
https://www.mdsec.co.uk/2026/03/rip-regpwn/
@cafe_security | 914 |
| 13 | Black Hat USA 2025 | Shade BIOS: Unleashing the Full Stealth of UEFI Malware
https://www.youtube.com/watch?v=t17YEHymwE4
@cafe_security | 2 727 |
| 14 | ROP the ROM: Exploiting a Stack Buffer Overflow on STM32H5 in Multiple Ways
https://www.errno.fr/Overflowing_STM32H5.html
@cafe_security | 893 |
| 15 | [ 42.1337] #security: EXAM: Exploiting Exclusive System-Level Cache in Apple M-Series SoCs for Enhanced Cache Occupancy Attacks
https://arxiv.org/html/2504.13385v1
Apparently the shared cache inside Apple M chips (the System Level Cache that both CPU and GPU use) can accidentally act like a little "activity meter" for the whole system. If you measure how busy or full it gets, you can infer what other parts of the chip are doing even if you're running somewhere else. The authors use that signal for things people don't expect a cache to reveal, like guessing which websites are being loaded from the pattern alone and even getting rough clues about what's on screen based on how the GPU renders frames. It wraps up with an "add noise" style mitigation that tries to blur the leak without much overhead. | 843 |
| 16 | Introducing Kernel Data Protection, a new platform security technology for preventing data corruption
https://www.microsoft.com/en-us/security/blog/2020/07/08/introducing-kernel-data-protection-a-new-platform-security-technology-for-preventing-data-corruption/
#KDP
#data_corruption
#BYOVD
@cafe_security | 832 |
| 17 | Chasing Shadows: Chronicles of Counter-Intelligence from the Citizen Lab
https://youtu.be/frmGzgBvGdg?si=sfnvy8Ah-6A1dAYV
#nso
#Citizen_Lab
#spyware
@cafe_security | 752 |
| 18 | A 0-click exploit chain for the Pixel 9
https://projectzero.google/2026/01/pixel-0-click-part-1.html
#android
@cafe_security | 801 |
| 19 | ![Slides and recordings for our @FOSDEM talks are up! Join [Björn Ruytenberg] and [Sina Karvandi] for an in-depth introduction](data:image/jpeg;base64,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){kind=small} Slides and recordings for our @FOSDEM talks are up! Join [Björn Ruytenberg] and [Sina Karvandi] for an in-depth introduction into @HyperDbg 's features and internals, or find out what's the latest in anti-anti-debugging techniques and HV transparency for malware reversing:
- https://fosdem.org/2026/schedule/event/APB9WC-mbec_slat_and_hyperdbg_hypervisor-based_kernel-_and_user-mode_debugging/
- https://fosdem.org/2026/schedule/event/CDPRDX-invisible_hypervisors_debugging_with_hyperdbg/ | 705 |
| 20 | A TSX-Based KASLR Break: Bypassing UMIP and Descriptor-Table Exiting
#KASLR
#UMIP
@cafe_security | 782 |
