Source Byte
Open in Telegram
هشیار کسی باید کز عشق بپرهیزد وین طبع که من دارم با عقل نیامیزد Saadi Shirazi 187
Show more8 521
Subscribers
+724 hours
+397 days
+20330 days
Posts Archive
8 521
Mimikatz
Mimikatz is an overall software tool used for process manipulation, primarily written in the C programming language by Mr. Benjamin Deply. This tool enables direct object manipulation and execution via various techniques. Mimikatz is widely used for bypassing security mechanisms, including EDR (Endpoint Detection and Response) software and antivirus tools. It has a number of features designed to assist with penetration testing and exploitation.https://github.com/gentilkiwi/mimikatz
8 521
Repost from APT IRAN مرکز تحقیقاتی
WatchTowr POCs:
CVE-2024-8068 & CVE-2024-8069 : Citrix Virtual Apps and Desktops (XEN) $versions - Unauthenticated Remote Code execution (Chain)
POC/AN : https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit
CVE-2024-47575 : Fortinet FortiManager 'Fgfmsd' $versions Unauthenticated Remote Code Execution (AKA FortiJump)
POC/AN : https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575
CVE-2024-0012 & CVE-2024-9474 : PAN-OS $versions - Authentication Bypass LPE Root Command Injection (AKA Sslvpn _ Chain)
POC/AN : https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012/
@APTIRAN
8 521
Repost from OnHex
🔴 احتمالا شندید که میگن آنتی ویروسها از طریق یسری امضا (signatures) اقدام به شناسایی بدافزارها میکنن.
در این ویدیو از hoagie hacks دقیقا توضیح میده که منظور از امضاء چیه و آنتی ویروسهایی مانند Microsoft Defender چطوری از اونا برای شناسایی بدافزارها استفاده میکنن.
برای اینکه اینارو نشون بده، یدونه shellcode injection خیلی ساده در ++C پیاده سازی کرده و اومده امضاهایی که منجر به شناسایی بدافزار در Virus Total میشه رو شناسایی و حذف میکنه.
این ویدیوها قراره بصورت مجموعه ارائه بشه و در قسمتهای بعدی تکنیکهای string/API hashing و metamorphic/polymorphic code رو هم پیاده سازی میکنه.
هدف این ویدیوها، بهبود مهارتهای تیم قرمز و آشنایی و دفاع در تیم های آبی هستش.
#تیم_قرمز #تیم_آبی #آنتی_ویروس #توسعه_بدافزار
#redteam #Blueteam #MalwareDev #AV
🆔 @onhex_ir
➡️ ALL Link
8 521
How to Investigate Insider Threats (Forensic Methodology)
https://www.inversecos.com/2022/10/how-to-investigate-insider-threats.html
Find their #ttp
8 521
COM Object - Part 1
Confirm the concept of COM objects through practice and Check how to find a vulnerable COM object.
https://hackyboiz.github.io/2024/11/24/ogu123/COM_Object/
8 521
Cyber Threat Intelligence (CTI): A Clear Process for Data Ingestion and Distribution
https://medium.com/@philiphristoff/cyber-threat-intelligence-cti-a-clear-process-for-data-ingestion-and-distribution-1889f6a2c5a8
8 521
Take a look into the depths of Windows kernels and reveal more than 60000 undocumented structures https://www.vergiliusproject.com/
8 521
Repost from Cyber Detective
Wayback Machine collection search
twitter.com/BanPangar shared a method for finding emails/nicknames mentions in the text of web pages/docs with archive.org collection search. Help find a lot of things that don't show up in Google results.
Don't forget the quotes.
#osint
8 521
Repost from Go Casts | Systems & Agents 🚀
دنبال یه سری منبع در مورد golang internals بودم که با این repository آشنا شدم، به صورت موضوعی لینک های خوبی رو معرفی کرده، دوست داشتید بررسی کنید.
A collection of articles and videos to understand Golang internals.
https://github.com/emluque/golang-internals-resources
@gocasts
8 521
Memory Management - Part 1: Virtual memory and Paging concepts
https://blog.reodus.com/posts/memory-management-part1/
credits : Amir M. Jahangirzad
8 521
Analyze cyber reconnaissance activities behind APT37 threats https://www.genians.co.kr/blog/threat_intelligence/apt37_recon
8 521
it seems Maldev academy is angry :(
we just re-share what others leak 👀
have a nice day and don't blame us
8 521
Please note that our moderators had to block the following messages in your channel @Source_byte due to copyright infringement: https://t.me/c/1725697372/1366 https://t.me/c/1725697372/1657 https://t.me/c/1725697372/1658 https://t.me/c/1725697372/1873 https://t.me/c/1725697372/1825 https://t.me/c/1725697372/1666 https://t.me/c/1725697372/1667 https://t.me/c/1725697372/1668 https://t.me/c/1725697372/1669 https://t.me/c/1725697372/1670 https://t.me/c/1725697372/1671 https://t.me/c/1725697372/1672 https://t.me/c/1725697372/1673 https://t.me/c/1725697372/1674
