Source Byte

👩‍💻 The Art Of Linux Persistence. • Account Creation in Linux; • User Account Creation; • Root/Superuser Account Creation; • Persistance using SSH Authorized Keys; • Persistence using Scheduled task; • Cron Jobs; • Systemd Timers; • Shell Configuration Modification; • Dynamic Linker Hijacking; • What is LD_PRELOAD; • Creating malicious Shared object Library for Persistence; • SUID binary; - Using SUID for Persistence; - Example Scenario; • rc.common/rc.local; - Using rc.local for Persistence; - Example: Starting a Service; • Systemd Services; - Creating a Custom systemd Service; - Security Considerations; - Advantages of Using systemd Services; • Trap; - Using trap in Scripts; • Backdooring user startup file; • Using System Call; - system Call Monitoring and Blocking; - Method 1: Emulate/Implement System Call in User-Space; - Method 2: Use Alternate System Calls; - Method 3: Fudging Around Parameters; • MOTD Backdooring; • APT Backdooring; • Git Backdooring; • Config; • Backdooring OpenVPN; • Security Researchers. ➡️ https://hadess.io/the-art-of-linux-persistence #Linux

A Deep Dive into Cobalt Strike Malleable C2 https://posts.specterops.io/a-deep-dive-into-cobalt-strike-malleable-c2-6660e33b0e0b #c2

Phobos Ransomware https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-060a #malware_analysis #malware_dev

PRESS RELEASE: Future Software Should Be Memory Safe https://www.whitehouse.gov/oncd/briefing-room/2024/02/26/press-release-technical-report/

TD-LTE Irancell modem TK-2510 can be hacked/unlocked!؟ | First Part Hardware Hack  Language: Persian https://sisoog.com/2024/02/28/irancell-td-lte-modem-tk-2510-can-be-hacked-unlocked/

Here is great channel for go developers https://t.me/xvfgo Thanks " the creeper " for sharing that also he mentioned XVFG admin is a nice guy🤷‍♂

Xeno RAT: A New Remote Access Trojan with Advance Capabilities Link #malware_analysis ------ @islemolecule_source

Keylogging in the Windows kernel with undocumented data structures Link #malware_dev ------ @islemolecule_source

IRC Botnet sinkhole:full reverse process Link #malware_analysis #reverse --------- @islemolecule_source

A Technical Deep Dive: Comparing Anti-Cheat Bypass and EDR Bypass Link #edr #malware_dev ------ @islemolecule_source

Deep Dive into DLL Sideloading and DLL Hijacking Link #malware_dev ------ @islemolecule_source