r0 Crew (Channel)

Titan is a VMProtect devirtualizer https://github.com/archercreat/titan #tools #reverse #devirt #devirtualizer #vmp #protector

Reverse Engineering Go Binaries with Ghidra (Part 1) https://forum.reverse4you.org/t/reverse-engineering-go-binaries-with-ghidra-part-1/20096/1 Reverse Engineering Go Binaries with Ghidra (Part 2) https://forum.reverse4you.org/t/reverse-engineering-go-binaries-with-ghidra-part-2/20097 #reverse #ghidra #golang

Use the free Microsoft bing's gpt with ida pro, to perform free analyzes! https://github.com/p1ay8y3ar/idaBingGPTPlugin #tools #idapro #ai

LdrLibraryEx a small x64 library to load dll's into memory. https://github.com/Cracked5pider/LdrLibraryEx #tools #redteam

PatchaPalooza uses the power of Microsoft's MSRC CVRF API to fetch, store, and analyze security update data. Designed for cybersecurity professionals, it offers a streamlined experience for those who require a quick yet detailed overview of vulnerabilities, their exploitation status, and more. This tool operates entirely offline once the data has been fetched, ensuring that your analyses can continue even without an internet connection. https://github.com/xaitax/PatchaPalooza https://patchapalooza.com/ #expdev #helpers #tool

msdocviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA. https://github.com/alexander-hanel/msdocsviewer #idapro #windows #api

Local Privilege Escalation in the glibc's ld.so (CVE-2023-4911) https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt POC: https://github.com/leesh3288/CVE-2023-4911 #expdev #linux #lpe #Alexs3y

HEVD: How a simple K-TypeConfusion took me 3 months long to create a exploit? — Windows 11 (build 22621) https://wafzsucks.medium.com/how-a-simple-k-typeconfusion-took-me-3-months-long-to-create-a-exploit-f643c94d445f #expdev #windows #hevd #kaslr #smep

Emulating IoT Firmware Made Easy: Start Hacking Without the Physical Device https://boschko.ca/qemu-emulating-firmware/ #qemu #firmware

Advanced Root Detection & Bypass Techniques In this blog, we will explore techniques related to root detection on Android devices and methods to bypass it. Our main focus will be on the strategies employed by app developers to protect their applications and prevent them from running on compromised devices. https://8ksec.io/advanced-root-detection-bypass-techniques/ #mobile #android #reverse #frida #root #detection #bypass

CVE-2023-4047 Root Cause Analysis https://www.richardosgood.com/posts/cve---2023---4047-root-cause-analysis/ #expdev #windows #1day #winrar

Analyzing a Modern In-the-wild Android Exploit https://googleprojectzero.blogspot.com/2023/09/analyzing-modern-in-wild-android-exploit.html #expdev #android #linux

Centralized resource for listing and organizing known injection techniques and POCs https://github.com/itaymigdal/awesome-injection #redteam #malware #inject

Process Injection without R/W target memory and without creating a remote thread https://github.com/Maff1t/InjectNtdllPOC #windows #redteam #ctf #malware #tips

WindowsNoExec - Abusing existing instructions to executing arbitrary code without allocating executable memory https://www.x86matthew.com/view_post?id=windows_no_exec #windows #ctf #malware #tips

Finding and exploiting process killer drivers with LOL for 3000$ In this article, I will introduce some kernel driver/internals theory and explain how to use the data in LOLDrivers to find interesting drivers. Finally, I will present 2 examples of vulnerable drivers and explain how to quickly reverse them and create a PoC to exploit them. https://alice.climent-pommeret.red/posts/process-killer-driver/ #redteam #loldrivers #windows

Living Off The Land Drivers is a curated list of Windows drivers used by adversaries to bypass security controls and carry out attacks. The project helps security professionals stay informed and mitigate potential threats. https://www.loldrivers.io/ #redteam #loldrivers

Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus) https://github.com/memN0ps/bootkit-rs #redteam #malware #bootkit #windows #rust

Smart Contract Security: The Ultimate Guide This article serves as a mini course on smart contract security and provides an extensive list of the issues and vulnerabilities that tend to recur in Solidity smart contracts. https://www.rareskills.io/post/smart-contract-security #crypto #security