Source Byte

A collection of weggli patterns for C/C++ vulnerability research https://security.humanativaspa.it/a-collection-of-weggli-patterns-for-c-cpp-vulnerability-research/ ——— @islemolecule_source

Malware repository https://github.com/cryptwareapps/Malware-Database #malware_analysis -------- @islemolecule_source

Flying Under the Radar: Abusing GitHub for Malicious Infrastructure https://www.recordedfuture.com/flying-under-the-radar-abusing-github-malicious-infrastructure #c2 , ——— @islemolecule_source

Tutorial - Writing Hardcoded Windows Shellcodes (32bit) LinK #shellcode _____ @islemolecule_source

X86 Opcode and Instruction Reference LinK #shellcode _____ @islemolecule_source

VT Query - behaviour:Local\\Kasimir_* AND behaviour:Local\\azov AND tag:64bits AND (behaviour_files:RESTORE_FILES OR behaviour_registry:rdpclient.exe)

The internals of Javascript Engine! https://youtube.com/watch?v=qf1KhBCaWNY The execution context and stack in Javascript! https://youtube.com/watch?v=3Ywr7MPxBKA Execution Stack in Chrome: Live Demo! https://youtube.com/watch?v=-UnIbstX_0A The what and why of max call stack in Javascript! https://youtube.com/watch?v=qc3aEKrohKc #javascript_internals , #javascript_engine ——— @islemolecule_source

F#ck AMSI! How to bypass Antimalware Scan Interface and infect Windows https://hackmag.com/security/fck-amsi/ #windows #malware_dev @islemolecule_source

Microsoft Open Source Code of Conduct (implement of DNS , AMASI ,....) LInK #windows #win_api @islemolecule_source

Why Protected Processes Are A Bad Idea Link #windows #threat_hunting @islemolecule_source

The Evolution of Protected Processes – Part 1 link The Evolution of Protected Processes – Part 2 link #windows #threat_hunting @islemolecule_source

#malware #reversing Показано как с помощью параметра SectionAlignment создать исполняемый файл с пустым PE-заголовком. https://secret.club/2023/06/05/spoof-pe-sections.html

NtDoc Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers https://ntdoc.m417z.com/ #windows #win_api @islemolecule_source