Source Byte

#Offensive_security Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing https://github.com/reveng007/DarkWidow

Learn to create Native Dropper Link #malware_dev ——— @islemolecule_source

An experimental, in-development, malicious software with RCE, and Data Exfiltration capabilities as a core. Link #malware_dev ——— @islemolecule_source

how to create a thread pool using solely native Windows APIs to execute a work callback as well as a timer callback in C. Link #malware_dev ——— @islemolecule_source

how to create a thread pool using solely native Windows APIs to execute a work callback as well as a timer callback in C. Link #malware_dev ——— @islemolecule_source

😈 [ Soumyani1 @reveng007 ] I wanna thank all of them (Not In Order): @SEKTOR7net @VirtualAllocEx @peterwintrsmith @D1rkMtr @Jean_Maes_1994 @0xBoku @Sh0ckFR @_winterknife_ @jack_halon For helping me develop this POC, DarkWidow: 🔗 https://github.com/reveng007/DarkWidow 🐥 [ tweet ]

Analysis of a Remote Code Execution (RCE) Vulnerability in Cobalt Strike 4.7.1 https://securityintelligence.com/x-force/analysis-rce-vulnerability-cobalt-strike/

My friend explain and show how to work with gdb + demo https://www.aparat.com/v/zdEBg #reverse

Malware Analysis Tutorials: a Reverse Engineering Approach Author: Dr. Xiang Fu (One of the best) Link #malware_analysis ——— @islemolecule_source

Ost2 old road map https://opensecuritytraining.info/Training.html

Write your Own Virtual Machine https://www.jmeiners.com/lc3-vm/ #VM , ——— @islemolecule_source

Here's the android malware handbook 2024

Hackin9 magazine

A Deep Dive Into Exploiting Windows Thread Pools https://urien.gitbook.io/diago-lima/a-deep-dive-into-exploiting-windows-thread-pools

Disable Windows #Defender ( Upgrade to SYSTEM) https://github.com/EvilGreys/Disable-Windows-Defender-- #malware_dev