Source Byte

researcher @mrd0x released MalAPI.io, an online catalog of Windows APIs that are commonly used in malware. This is an incredible resource that helps to discern which APIs are worth scrutiny when performing analysis of the IAT. Site: https://malapi.io

Associated Press : Three underwater communication cables (global internet) in the Red Sea were damaged during the attacks of the Yemeni Houthis, but it is not clear what caused this damage.

There is industry consensus on moving away from C/C++: "Secure by Design: Google’s Perspective on Memory Safety" TLDR: Rust is not the answer. https://security.googleblog.com/2024/03/secure-by-design-googles-perspective-on.html?m=1

Pe explanation from ARTeam Best

.

Windows 11 is getting native macOS or Linux-like Sudo command https://www.windowslatest.com/2024/02/01/first-look-windows-11-is-getting-native-macos-or-linux-like-sudo-command/ Sudo On Windows a Quick Rundown https://www.tiraniddo.dev/2024/02/sudo-on-windows-quick-rundown.html?m=1 Introducing Sudo for Windows! https://devblogs.microsoft.com/commandline/introducing-sudo-for-windows/

https://explorer.globe.engineer/ #ai

Sark (named after the notorious Tron villain) is an object-oriented scripting layer written on top of IDAPython. Sark is easy to use and provides tools for writing advanced scripts and plugins. https://sark.readthedocs.io/en/latest/

Windows Local Privilege Escalation Cookbook https://github.com/nickvourd/Windows-Local-Privilege-Escalation-Cookbook

Windows Local Privilege Escalation Cookbook https://github.com/nickvourd/Windows-Local-Privilege-Escalation-Cookbook

Writing pe-parser and explain about its structure https://0xrick.github.io/win-internals/pe1/ https://0xrick.github.io/categories/#win-internals

ساختار فایل PE قسمت ۱ – header ها https://mrpythonblog.ir/pe1/

Reverse engineering of Android Phoenix RAT Analysis: https://cryptax.medium.com/reverse-engineering-of-android-phoenix-b59693c03bd3 Phoenix overview: https://cryptax.medium.com/android-phoenix-authors-claims-sample-identification-and-trends-f199cbc9901d

"Introduction to Reverse Engineering with Ghidra" https://voidstarsec.com/ghidra.html#:~:text=Introduction%20to%20Reverse%20Engineering%20with%20Ghidra

 Initial Access Operations Part 2: Offensive DevOps https://www.blackhillsinfosec.com/initial-access-operations-part-2/

Keylogging in the Windows kernel with undocumented data structures https://eversinc33.com/posts/kernel-mode-keylogging/