es
Feedback

¡No caigas en manos de tramposos! Telemetrio encuentra y marca estos canales 👉 Si quieres ver la etiqueta, suscríbete

Source Byte

Source Byte

Ir al canal en Telegram

هشیار کسی باید کز عشق بپرهیزد وین طبع که من دارم با عقل نیامیزد Saadi Shirazi 187

Mostrar más
8 569
Suscriptores
+224 horas
+467 días
+21130 días
Archivo de publicaciones
Black hat: process injection techniques - Gotta catch them all https://youtu.be/xewv122qxnk?si=MvVaE9RLQCPQ67wn #malware_analysis #malware_dev

Ali
Techniques that i will cover here:
[x] Inject Dll in remtote process using CreateRemoteThread API.
[x] Inject Dll in remtote process using SetWindowsHookExW API.
[x] Inject ShellCode in remtote process using CreateRemoteThread API.
[x] Inject ShellCode in remote process using QueueUserAPC API.
[x] Inject ShellCode in remote process using Early Bird Technique.
[x] Inject ShellCode in remote process using TLS CallBack Technique.
[x] Inject using Thread execution hijacking.
[x] Inject Dll in remtote process using Reflective DLL injection.
[x] inject using Process Hollowing.
[x] inject using Process Doppelganging.
[ ] inject using Atom Bombing.
[x] inject using Process Ghosting.
[x] inject and persist using Image File Execution Options.
[x] inject using using AppInit_DLLs Registry.
[x] inject using using AppCertDlls Registry.
https://github.com/MahmoudZohdy/Process-Injection-Techniques/tree/main #malware_dev

Mitre : Process injection Sub-techniques(12) https://attack.mitre.org/techniques/T1055/ #malware_dev

us-19-Kotler-Process-Injection-Techniques-Gotta-Catch-Them-All.pdf

#meme
#meme

Horse Shell analysis (TP-Link routers malware by chinese APT Camaro Dragon) Credits @_CPResearch_ buff.ly/42WZ8zW #malware ,
Horse Shell analysis (TP-Link routers malware by chinese APT Camaro Dragon) Credits @_CPResearch_ buff.ly/42WZ8zW #malware , #IoT ,

New PoolParty Process Injection Techniques Outsmart Top EDR Solutions thehackernews.com/2023/12/ne… #EDR , #process_injection
New PoolParty Process Injection Techniques Outsmart Top EDR Solutions thehackernews.com/2023/12/ne… #EDR , #process_injection

The path from a C project and assembler to shellcode https://www.orderofsixangles.com/translations/2021/06/12/shellcoding.html #shellcode

Writing shellcode for Windows in assembler https://habr.com/en/articles/522966/ #shellcode

Writing shellcode for Windows in assembler https://habr.com/en/articles/522966/ #shellcode

17065-manual-shellcode.pdf

Shellcoding for Linux and Windows Tutorial https://www.vividmachines.com/shellcode/shellcode.html

How to Write Shellcode for Shellcode Injection and Simplify Assembly Code Development https://medium.com/@muchiemma/how-to-write-shellcode-for-shellcode-injection-and-simplify-assembly-code-development-703c3f214c46 #malware_dev #shellcode

How to Write Shellcode for Shellcode Injection and Simplify Assembly Code Development https://medium.com/@muchiemma/how-to-write-shellcode-for-shellcode-injection-and-simplify-assembly-code-development-703c3f214c46 #malware_dev #shellcode

Repost from Zer0Day Lab
#BlackHat Europe 2023: "A Technical Analysis of a HeadCrabMalware and the Mind Behind It", 2023.