Source Byte

Most PE executables only have a DOS stub, but Robert Xiao combined DOOM Dos and Windows executables into a single universal file. Advanced merge of genuine Dos headers, relocations, DOS4/GW headers and PE file. https://github.com/nneonneo/universal-doom #PE

Debugging and Reversing ALPC https://csandker.io/2022/05/29/Debugging-And-Reversing-ALPC.html #windows_internals , #reversing , #debugging , #ALPC

Offensive Windows IPC Internals 3: ALPC https://csandker.io/2022/05/24/Offensive-Windows-IPC-3-ALPC.html #windows_internals ,

In 2021, I worked with @juanandres_gs on a Predatory Sparrow attack against the fuel system. I did not openly share the draft back then, as it exposed live vulnnerable systems. Having their second go with it yesterday, it's time to share it openly now. https://sites.google.com/darkcell.se/www/sparrows

https://github.com/gatariee/Winton A cross-platform Command and Control (C2) framework written in Golang and Python. #malware_dev

https://github.com/gatariee/Winton A cross-platform Command and Control (C2) framework written in Golang and Python. #malware_dev

Malware Unpacking With Memory Dumps - Intermediate Methods https://embee-research.ghost.io/unpacking-malware-using-process-hacker-and-memory-inspection/ #malware_analysis

reverse Engineering, assembly and some concepts https://0xinfection.github.io/reversing/ #reverse

In 2021, I worked with @juanandres_gs on a Predatory Sparrow attack against the fuel system. I did not openly share the draft back then, as it exposed live vulnnerable systems. Having their second go with it yesterday, it's time to share it openly now. https://sites.google.com/darkcell.se/www/sparrows

How to hook functions? https://www.youtube.com/watch?v=qEbPCIFtyOs #hooking

part 5 is coming , don't miss it !!! Part 5 - Intro to C for #Windows Linked list enumeration, #API, and #windows_internls I don't know if you all are keeping track, this is now 10(!) FREE hours of hands-on training in C from SANS SEC670 author @jon__reiter Register here : https://sans.org/u/1u3Z i will share recorded video in group also

Direct system calls vs. indirect system calls https://xss.is/threads/97422/

real osint be like :

My talk on leHACK 2023: "Hardcore OSINT: Reversing social media mechanisms" 😚 👉 Lots of technical tricks to enumerate users on social media 👉 Extracting user IDs from large ecosystems 👉 How to protect your service and build OSINT-proof 🛡 users storage Tried my best to balance between technical hell, practical use, and jokes 🙈 Feel free to write me to get the full presentation 📖 https://www.youtube.com/watch?v=0yQRf0Mx-hc

Assembly blocks for hooking windows API functions. https://github.com/EgeBalci/Hook_API #hooking

Windows API Hooking Tutorial (Example with DLL Injection) https://www.apriorit.com/dev-blog/160-apihooks #hooking