Source Byte

Windows Functions in Malware Analysis – Cheat Sheet https://gist.github.com/404NetworkError/a81591849f5b6b5fe09f517efc189c1d#internetwritefile-top #malware_analysis

How do we write a shellcode to elevate privileges and gracefully return to userland? mdanilor.github.io/posts/hev… #shellcode , #privilege_scalation

Rebase the program when we load it to ida https://malware.news/t/nkabuse-threat-uses-nkn-blockchain-network-for-ddos-attacks/76748 #reverse

Offensive Tool Development - The Shellcode Compiler Was Right There All Along Part 1 : https://sh3llsp4wn.github.io/Shellcode-With-The-Default-Linux-Toolchain/ Part 2 : https://sh3llsp4wn.github.io/Shellcode-With-The-Default-Linux-Toolchain-2/

Hacking: How to Make Your Own Keylogger in C++ Programming Language

#Malware_analysis GULOADER: deobfuscating the downloader https://www.elastic.co/security-labs/getting-gooey-with-guloader-downloader Rhadamanthys v0.5.0 - a deep dive into the stealer’s components https://research.checkpoint.com/2023/rhadamanthys-v0-5-0-a-deep-dive-into-the-stealers-components

Cover various security approaches to attack techniques and also provides new discoveries about security breaches. https://github.com/LearningKijo/SecurityResearcher-Note

Finding Metasploit & Cobalt Strike URLs Metasploit and Cobalt Strike generate shellcode for http(s) shells. The URLs found in this shellcode have a path that consist of 4 random alphanumeric characters. But they are not completely random: their 8-bit checksum is a member of a small set of constants. https://isc.sans.edu/diary/Finding+Metasploit+Cobalt+Strike+URLs/27204 #Cobalt_Strike , #Metasploit ,

CSharp Payload Phoning to a CobaltStrike Server https://isc.sans.edu/diary/30490?n #Cobalt_Strike ,

Linux Red Team

cat /home/redteam/

1- Exploitation Techniques 2 - Privilege Escalation Techniques 3 - Persistence Techniques 4 - Defense Evasion - Hiding Linux Processes 5 - Defense Evasion - Rootkits #linux #learn #hack

wayback tweets https://waybacktweets.streamlit.app/

SHA1 and its weaknesses Excellent writeup by Declain Thomas (@evervault) evervault.com/blog/sha-1-get… #sha1