Source Byte

😈 [ Aleem Ladha @LadhaAleem ] I've fully automated the lab used for @_leHACK_ Active Directory 2024 workshop done by @mpgn_x64 and it's available for everyone ! 🔥 Also big kudos to @M4yFly for the playbooks and NetExec dev teams for this awesome tool ! Hope you enjoy, more to come 🔗 https://github.com/Pennyw0rth/NetExec-Lab 🐥 [ tweet ]

HijackFileHandle -

Hijack a file in a remote process without code injection In three language 😂

https://web.archive.org/web/20220802125038/https://www.x86matthew.com/view_post?id=hijack_file_handle [翻译]HijackFileHandle - 在不注入代码的情况下劫持一个远程进程的文件 https://bbs.kanxue.com/thread-271445-1.htm Взлом дескрипторов в Windows с помощью Handle Hijacking https://spy-soft.net/handle-hijacking/ #malware_dev

تبریک ! Congratulations to the Iran WorldSkills Cyber Security Team! 💎 Your dedication, hard work, and exceptional skills have truly paid off. Competing on the world stage and showcasing your talents in cyber security is a remarkable achievement. Your success not only brings pride to our nation but also inspires future generations of cyber security enthusiasts. Keep pushing the boundaries and setting new standards of excellence. We are incredibly proud of you! https://results.worldskills.org/results?offset=0&base_skill=546

HijackFileHandle - Hijack a file in a remote process without code injection In three language https://web.archive.org/web/20220802125038/https://www.x86matthew.com/view_post?id=hijack_file_handle [翻译]HijackFileHandle - 在不注入代码的情况下劫持一个远程进程的文件 https://bbs.kanxue.com/thread-271445-1.htm Взлом дескрипторов в Windows с помощью Handle Hijacking https://spy-soft.net/handle-hijacking/

CreateSvcRpc - A custom RPC client to execute programs as the SYSTEM user https://www.x86matthew.com/view_post?id=create_svc_rpc

😈 [ Kurosh Dabbagh @_Kudaes_ ] Somebody asked if you can run a dll directly without rundll32 as you would do with an exe. You just need to remove the IMAGE_FILE_DLL flag from IMAGE_FILE_HEADER->Characteristics, which can be done with the option -e. Don't see much use for it tho ^^ 🔗 https://github.com/Kudaes/CustomEntryPoint 🐥 [ tweet ]

Anatomy of a Lumma Stealer Attack via Fake CAPTCHA Pages - Part 1 https://denwp.com/anatomy-of-a-lumma-stealer/

j00ru//vx tech blog https://j00ru.vexillium.org/articles/ #exp

Analysis of some feature of vmprotect https://sachiel-archangel.medium.com/analysis-of-vmprotect-0b28c8e47ca5 #protector

The changes to the IDAPython API in IDA 9 has broken some plugins and scripts Here's how to fix some of these issues: https://blog.junron.dev/IDAPython%20Research/IDAPython%208%20to%209.html

🔥 Iran Ethical Hackers 2016