Offensive Security

A custom Linux beacon for Cobalt Strike While official Cobalt Strike does not natively support generating Linux beacons, the author says that it is possible to build custom implants for Cobalt Strike on virtually any platform. The only requirement is that the implant communicates correctly with the teamserver https://github.com/EricEsquivel/CobaltStrike-Linux-Beacon @GoSecurity #dfir #blueteam #threathunting #c2 #redteam #cobalt

CVE-2026-21508 - Windows LPE via arbitrary COM object initialization The vulnerability essentially works by forcing a process running as system and that uses the undocumented function Windows_Storage!_SHCoCreateInstance, to create an arbitrary COM object of our choice. For this to happen the object must be associated with an already registered COM class that supports CLSCTX_INPROC_SERVER. Arbitrary COM object creation is archived by manipulating a CoCreateInstance call first argument @GoSecurity #CVE #LPE #DFIR #blueteam

Zero Day Ransomware vs Popular Antivirus and EDR @GoSecurity #raas #ransomware #malware #edr #Av

i really like malware

Ledger has suffered another security breach, compromising customers personal information. ledger.com @GoSecurity #ledger

https://www.genians.co.kr/en/blog/threat_intelligence/dll @GoSecurity #Apt37

بحث با انسان‌های کودن و احمق اونارو باهوش‌تر نمی‌کنه، شمارو به‌ کودن شدن نزدیک‌ می‌کنه.

Text editor in c https://youtube.com/playlist?list=PLWZxDaGQjf0sgrCJXH-OjMQQUcQlFcUsP&si=OJZUtykZ-xBSCY_l @GoSecurity #C

https://spear.cx #forum

It's not new to us.

SHA256:

13d2a8cc4f0371786724a1c76452ef1b819de90455b80ef01461f09cf8ae5f87

@GoSecurity #analysis #source #trojan #elf #linux #persistence #malware

New adventures

Memory Segments in C/C++ @GoSecurity #C #Cpp #memory

Algorithm of success @GoSecurity

یه اپ باحال ساختن ،کدشو نخوندم ولی خیلی سوپر ایزیه برای کسایی که چیزی از پراسس و سرویسای مختلف نمی‌دونن https://github.com/pranshuparmar/witr @GoSecurity