ch
Feedback

不要被骗子欺骗!Telemetrio 会找到并标记这些频道 👉 如果想查看标记,请订阅

Source Byte

Source Byte

前往频道在 Telegram

هشیار کسی باید کز عشق بپرهیزد وین طبع که من دارم با عقل نیامیزد Saadi Shirazi 187

显示更多
8 563
订阅者
+1024 小时
+517 天
+21930 天
帖子存档
photo content

F#ck AMSI! How to bypass Antimalware Scan Interface and infect Windows https://hackmag.com/security/fck-amsi/ #windows #malware_dev @islemolecule_source

Microsoft Open Source Code of Conduct (implement of DNS , AMASI ,....) LInK #windows #win_api @islemolecule_source

Why Protected Processes Are A Bad Idea Link #windows #threat_hunting @islemolecule_source

The Evolution of Protected Processes – Part 1 link The Evolution of Protected Processes – Part 2 link #windows #threat_hunting @islemolecule_source

#malware #reversing Показано как с помощью параметра SectionAlignment создать исполняемый файл с пустым PE-заголовком. https://secret.club/2023/06/05/spoof-pe-sections.html

NtDoc Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers https://ntdoc.m417z.com/ #windows #win_api @islemolecule_source

3.26 KB

OctoBankingBotnet.zip33.40 MB

Octo Banking Botnet [ Source Code ] Leaked Link Note: ONLY DEBIAN 11 6 gb RAM / 100 GB / 3 cores, Server Internet speed 100 megabytes ❌open in VM #leaked @islemolecule_source

A detailed analysis of the Menorah malware used by APT34 Link #malware_analysis @islemolecule_source

ConfuserEx2 - Full Deobfuscation Guide Link #reverse @islemolecule_source

Red team cheat sheet Link #cheat_sheet @islemolecule_source

Good cheat sheet and article Link #cheat_sheet @islemolecule_source

Concealed code execution: Techniques and detection (Process Tampering) Link #malware_dev @islemolecule_source

Repost from Zer0Day Lab
BypassAV. • Объемная Mind Map, в которой перечислены основные методы и инструменты для обхода антивирусов и EDR. https://gith
BypassAV. • Объемная Mind Map, в которой перечислены основные методы и инструменты для обхода антивирусов и EDR. https://github.com/CMEPW/BypassAV • Необходимые ссылки: https://github.com/matro7sh/BypassAV/blob/main/Bypass-AV.md #AV

Remember #stuxnet ? It was Dutch Erik van Sabben who planted the bug in Iran. I've seen it in Dutch news channels, will pop up internationally any minute I guess. https://nos.nl/artikel/2504114-nederlander-saboteerde-atoomcomplex-in-iran-den-haag-wist-niets #tweet credit : @CisoDiagonal