Source Byte

Fuzzer Development: The Soul of a New Machine https://h0mbre.github.io/New_Fuzzer_Project/#

🔴سامانه نمایش آنلاین حرکت نفتکش‌ها در سراسر دنیا که توسط سیستم های ماهواره‌ای آمریکا و اسرائیل کنترل میشد توسط گروه هکری YareGomnam از دسترس خارج شد سپاه سایبری پاسداران👇🏻 ☑️ @SEPAHCYBERY

Exploring malicious Windows drivers (Part 1): Introduction to the kernel and drivers https://blog.talosintelligence.com/exploring-malicious-windows-drivers-part-1-introduction-to-the-kernel-and-drivers/ #mal_dev , #windows_internals ———

Ghidra Binary Diffing Engine credit: @clearseclabs clearbluejar.github.io/posts… ——— @islemolecule_source

MutationGate is a new approach to bypass EDR's inline hooking by utilizing hardware breakpoint to redirect the syscall. https://github.com/senzee1984/MutationGate #malware_dev #edr ---- @islemolecule_source

MikroTik router reverse engineering (SOHO, embedded/IoT devices) Excellent writeup by @hgarrereyn and @__comedian https://margin.re/2022/06/pulling-mikrotik-into-the-limelight/ Slides (RECon) #iot , ——— @islemolecule_source

MikroTik router reverse engineering (SOHO, embedded/IoT devices) Excellent writeup by @hgarrereyn and @__comedian https://margin.re/2022/06/pulling-mikrotik-into-the-limelight/ Slides (RECon)

Elevate process privileges to the System or Trustedinstaller Link #malware_dev #windows ------- @islemolecule_source

Microsoft has observed a subset of Iran-based threat actor Mint Sandstorm (PHOSPHORUS) employing new TTPs to improve initial access, defense evasion, and persistence in campaigns targeting individuals at universities and research orgs. https://www.microsoft.com/en-us/security/blog/2024/01/17/new-ttps-observed-in-mint-sandstorm-campaign-targeting-high-profile-individuals-at-universities-and-research-orgs/ #TTP , #red_team ——— @islemolecule_source

Understanding x86_64 Paging Link #internals #windows ------ @islemolecule_source

Malware repository Link #malware_analysis @islemolecule_source

Amazing tool for anyone interested in mobile & malware security… kaspersky has released iShutdown, a collection of Python scripts that can detect various strains of iOS #spyware, such as #Pegasus, #Predator, and #Reign. https://github.com/KasperskyLab/iShutdown #tool ——— @islemolecule_source

Is remote code execution in UEFI firmware possible? Yes it is. Meet #PixieFAIL: 9 vulnerabilities in the IPv6 stack of EDK II, the open source UEFI implementation used by billions of computers. credit : @fdfalcon & @4Dgifts https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html

My programming setup Link #malware_dev @islemolecule_source

Nim on the Attack: Process Injection Using Nim and the Windows API Link #malware_dev @islemolecule_source

Malware Development for Dummies Link #malware_dev @islemolecule_source

Pentester notebook:Malware Development Link #malware_dev @islemolecule_source