Source Byte

System32 Important Files by Hadess, 2024 #windows

😈 [ eversinc33 🩸🗡️ @eversinc33 ] If you are facing an EDR with PEB protection/obf which makes Ldr inaccessible & want to inject shellcode, just pass the VA of LoadLibrary (which is consistent across processes) to the shellcode via egg-hunting from your injector, enabling lib resolution without touching the PEB. 🐥 [ tweet ] *смешной срач в треде*

https://os.phil-opp.com/ https://github.com/phil-opp/blog_os

Active Directory Enumeration for Red Teams In this post, we will explore how defenders can monitor for suspicious LDAP activity, as well as operational security approaches for red teams conducting LDAP reconnaissance. credits : Dominic Chell https://www.mdsec.co.uk/2024/02/active-directory-enumeration-for-red-teams/ you should not miss this blog :)

Один из подписчиков поделился новым курсом от Sektor7, и был не против отдать его в массы. Это уже третья часть про разработку малвари: Malware Development Advanced Vol.1 Остальные курсы Sector7 тоже есть на канале: 1. RTO: Malware Development Essentials 2. RTO: Windows Persistence 3. RTO: Privilege Escalation in Windows 4. RTO: Malware Development Intermediate 5. RTO: Evasion Windows #course #malware #redteam #pentest

Embedding encrypted payloads in resource section Payload

placement: .rsrc section Adding a resource to our project Retrieving payload contents Locating resource Loading resource contents Obtain a pointer Decrypting the payload Execution

https://ry0dan.github.io/malware%20development/Malware-Development-Crafting-Digital-Chaos-03/ credit : Motawkkel Abdulrhman #malware_dev

pspy is a command line tool designed to snoop on processes without need for root permissions. It allows you to see commands run by other users, cron jobs, etc. as they execute. https://github.com/DominicBreuker/pspy #tool

Techniques Learned from the XZ Backdoor

The IFUNC feature of GLIBC Concealing characters using Radix Tree Obtaining all dependency information Hooking Functions from Other Dependency Libraries

https://medium.com/@knownsec404team/techniques-learned-from-the-xz-backdoor-74b0a8d45c30 #cve_analysis , #CVE_2024_3094

#udemy - Game Hacking: Cheat Engine Game Hacking Basics @RedBlueHit 💀👀 @RedBlueTM 🔒

7. Learn Assembly/Reverse Engineering

Assembly is a language, being able to Reverse Engineer is a skill that acquires knowledge of Assembly. When you don't have access to the source code of programs, you need to be able to reverse engineer to understand how the game works and what it is doing. Being able to reverse engineer will allow you to find functions,classes, and variables that are useful to you. This is a very powerful skill. It is ESSENTIAL for game hacking. When you know how everything works you can make it or break it. It is more important to be able to read in Assembly than to write in it. You have C++ to write for you(low memory manipulation remember?) . I recommend the Art of Assembly, And The Secrets of Reverse Engineering as ebooks for learning. I also recommend reversing your own programs in C++ while also learning. For example program a hello world in C++ and reverse it in tools like Ollydbg or IDA. Then code up a little more complex program with basic variables and reverse it, then add operations and reverse that, etc.

8. The most important thing is to mess around, and apply the skills you learned.

To be able to game hack, is something you have to learn by doing, trial and error. View other people sources. Just remember, with persistence you will win!

Google is your friend and there are many great threads on this forum. If you truly want to be able to create game hacks, then you will get there. Be Curious and keep learning. #game