Source Byte

Technique for spoofing PE files sections and embed executable code by x86matthew secret.club/2023/06/05/spoof…

Searching for Malicious HTTP Servers by Identifying Typos in HTTP Responses blog.fox-it.com/2023/11/15/t…

Inside the Mind of a Cyber Attacker: from Malware creation to Data Exfiltration (Part 2) – Hacktive Security Blog blog.hacktivesecurity.com/in… tweet

I made it for who that wants to analyze pcap files which are so huge Ja4 link: https://github.com/FoxIO-LLC/ja4

I made it for who that wants to analyze pcap files which are so huge https://github.com/FoxIO-LLC/ja4

Tired of seeing nerds arguing about C2's? Next time use some C4. EDR's struggle against C4

Here is a very poorly written way to do 'whoami' using CreateNamedPipe and Advapi32!NpGetUserName. This undocumented function will do the generic LookupAccountSidW via GetUserNameExW, but it can act as a proxy function, or something. https://pastebin.com/raw/ZsReS7k4

#tools #Threat_Research Awesome GPTs (Agents) for Cybersecurity https://github.com/fr0gger/Awesome-GPT-Agents

​​ProcessStomping A variation of ProcessOverwriting to execute shellcode on an executable's section. https://github.com/naksyn/ProcessStomping #cybersecurity #infosec #pentesting #redteam

Mobile Malware Analysis Part 3 – Pegasus 8ksec.io/mobile-malware-anal…

Interesting writeup by raelizecom on how to use power and electromagnetic analysis to break hardware cryptography using Power analysis: raelize.com/blog/espressif-s… Electromagnetic analysis: raelize.com/blog/espressif-s…

Beginner introduction to Linux processes and how they are started by the execve() syscall iq.thc.org/how-does-linux-st…

Excellent series for learning the basic of ELF file format internals Credits IntezerLabs Part 1: intezer.com/blog/research/ex… Part 2: intezer.com/blog/malware-ana… Part 3: intezer.com/blog/malware-ana… Part 4: intezer.com/blog/malware-ana…

boopkit: Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.. github.com/krisnova/boopkit

PowerShell-Obfuscation-Bible: A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository github.com/t3l3machus/PowerS…

Ptrace Security GmbH Using LLMs to reverse JavaScript variable name minification thejunkland.com/blog/using-l…

Guide on obscure features of C programming language by Jorengarenar blog.joren.ga/less-known-c