Source Byte

Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining https://decoded.avast.io/janrubin/guptiminer-hijacking-antivirus-updates-for-distributing-backdoors-and-casual-mining/#storing-payloads-in-registry #AV , #GuptiMiner

Portable, simple and fast installer for Visual Studio Build Tools. Downloads standalone 64-bit MSVC compiler, linker & other tools, also headers/libraries from Windows SDK, into a portable folder, without installing Visual Studio. https://github.com/Data-Oriented-House/PortableBuildTools

Unveiling custom packers: A comprehensive guide [ GitHub ] #reverse #packer

Taking a deep dive into SmokeLoader [ GitHub ] #malware_analysis

Automating Qakbot Malware Analysis with Binary Ninja [ Analysis ] #malware_analysis

Experimental Windows x64 Kernel Rootkit. [ GitHub ] #windows #malware_dev

Native code virtualizer for x64 binaries [ GitHub ] #reverse

This is a repository with sample malduck🦆 config extraction modules. By utilizing them you should be able to extract embedded configuration from unpacked malware samples of: njrat, remcos, revil, graphicalproton [ GitHub ]

A Trip Down Memory Lane Antivirus evasion has quickly become one of the most overwritten topics, with endless articles on writing shellcode loaders and other evasive stageless droppers. https://gatari.dev/posts/a-trip-down-memory-lane/ credit : @gatariee #AV , #red_team

Dumping Stored Credentials with SeTrustedCredmanAcc ssPrivilege [ Dump creds ] #windows #malware_dev #creds

Bypassing UAC in the most Complex Way Possible! [ Tranids ] #windows #uac

Designing Secure Software: A Guide for Developers, Loren Kohnfelder, 2021 The book begins with a discussion of core concepts like trust, threats, mitigation, secure design patterns, and cryptography. The second part, perhaps this book’s most unique and important contribution to the field, covers the process of designing and reviewing a software design with security considerations in mind. The final section details the most common coding flaws that create vulnerabilities, making copious use of code snippets written in C and Python to illustrate implementation vulnerabilities. Official page #book #coding #Python

An Intro to C for Windows - Part 8

Threads, stacks, and heaps! Part 8 will take a look at using Windows APIs to create threads, heaps, and using a debugger to view stacks. We will also talk about some of the myths around stack growth versus stack usage.

https://www.sans.org/webcasts/an-intro-to-c-for-windows-part-8/ credit : Jonathan Reiter

Thank you all guys Only two more boosts left 🔥🔥