Source Byte

😂

Password: hide01.ir

DLL Proxying using forwards with absolute paths https://github.com/mrexodia/perfect-dll-proxy

Tons of trainings out there for implant dev now as of just last year even. - Pavel has his own https://training.trainsec.net/malware-analysis-and-development-workshop - there’s Maldev Academy which is great - there’s ODT from a Microsoft dude https://courses.ask-academy.live/courses/offensive-development-and-tradecraft - SANS has an implant dev course https://www.sans.org/cyber-security-courses/red-team-operations-developing-custom-tools-windows/ - CodeMachine had some but I don’t think they are public offerings anymore - Paranoid Ninja BRC4 author had some #malware_dev

یه مقاله درجه یک درباره container networking How Container Networking Works: a Docker Bridge Network From Scratch https://labs.iximiuz.com/tutorials/container-networking-from-scratch @gocasts

" The architecture of SAST tools: An explainer for developers " More developers will have to fix security issues in the age of shifting left. Here, we break down how SAST tools can help them find and address vulnerabilities.

+Automate source code scanning. +Expand vulnerability detection. +Assist with manual code reviews. +Software composition analysis (SCA) +Dynamic application security testing (DAST) +Interactive application security testing (IAST)

https://github.blog/2024-02-12-the-architecture-of-sast-tools-an-explainer-for-developers/ #devops ——— @islemolecule_source

" The architecture of SAST tools: An explainer for developers " More developers will have to fix security issues in the age of shifting left. Here, we break down how SAST tools can help them find and address vulnerabilities.

+Automate source code scanning. +Expand vulnerability detection. +Assist with manual code reviews. +Software composition analysis (SCA) +Dynamic application security testing (DAST) +Interactive application security testing (IAST)

#devops ——— @islemolecule_source

OSED Notes: (Offensive Security Exploit Developer) by Zeyad Azima, 2024 Source GitHub Twitter #pentest #useful #exam #celebrery

Fuzzer Development 2: Sandboxing Syscalls https://h0mbre.github.io/Lucid_Context_Switching/# #part_2

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis. https://github.com/secfigo/Awesome-Fuzzing

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development https://github.com/FabioBaroni/awesome-exploit-development

Dump lsass using only Native APIs https://github.com/ricardojoserf/NativeDump

Mind blowing, they give a list to AI then it decides who is going to die 😐

‘Lavender’: The AI machine directing Israel’s bombing spree in Gaza

The Israeli army has marked tens of thousands of Gazans as suspects for assassination, using an AI targeting system with little human oversight and a permissive policy for casualties, +972 and Local Call reveal.

https://www.972mag.com/lavender-ai-israeli-army-gaza/ WTF I JUST READ🤯

#reversing Reversing Windows Container Part 1 - Silo: https://blog.quarkslab.com/reversing-windows-container-episode-i-silo.html Part 2 - Silo to Server Silo: https://blog.quarkslab.com/reversing-windows-container-part-ii-silo-to-server-silo.html

Execute shellcode via python (Ctypes module) https://youtu.be/n-nU2jCK5-c?si=JN3P8yu6M2_2wdwA

Abusing undocumented features to spoof PE section headers by x86matthew https://secret.club/2023/06/05/spoof-pe-sections.html