کانال بایت امن

#Github #ReverseEngineering Do you Remember Syser Debugger ? 😉 1430 230320 ➖implement FPU reg "%1.7e" ➖ implement XMM 8/16 reg by dword x 4 ➖ fix instr info for qword data ➖ fix all disassm in uppercase ➖ fix debugger leak handle ➖ revert fix for detached process ➖ fix debugger handle unload dll 🌐 Project Link @securebyte

#Github #Internal Another Repo with more details about Windows System Call Tables. 🌐 Project Link @securebyte

#Misc #ReverseEngineeing #macOS This corner dedicated to reverse engineering, malware, rootkits, and security. Content is mostly dedicated to Mac OS X and also iOS. 🌐 Website @securebyte

#Github #Internal Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10) (win32k.sys). The interface between a process and an operating system is provided by system calls. In general, system calls are available as assembly language instructions. They are also included in the manuals used by the assembly level programmers. 🌐 Project Link @securebyte

#Article #ReverseEngineering 📗iOS Security Analysis with MobSF ➖Netguru Recently, our iOS security team was looking for a security analysis tool and we tested MobSF as one of our solutions. MobSF is a tool recommended by OWASP in its Mobile Security Testing Guide. 🌐 Article Link @securebyte

#Article #ReverseEngineering 📗Windows Process Injection in 2019 - BlackHat USA-19 ➖Amit Klein, Itzik Kotler Process injection in Windows appears to be a well-researched topic, with many techniques now known and implemented to inject from one process to the other. Process injection is used by malware to gain more stealth (e.g. run malicious logic in a legitimate process) and to bypass security products (e.g. AV, DLP and personal firewall solutions) by injecting code that performs sensitive operations (e.g. network access) to a process which is privileged to do so. 🌐 Article Link @securebyte

با عرض سلام به تمامی دوستان و همراهان عزیزمان خوشحالیم که یک سال دیگر را در کنار هم سپری کردیم. در سال جدید آرزرو میکنیم که زندگی مردم سرزمینمان توأم با سلامتی و آرامش باشد. آمدن بهار و فرا رسیدن نوروز 1399 بر همه ی شما همراهان گرامی تبریک و شاد باش. تیم امنیت نرم افزار بایت امن

#Github #MalwareAnalysis Cuckoo VM for Malware Analysis By binaryzone Things you need: 1. The VM from here. 2. Username: user1 & Password: forensics 3. Add a Windows ISO to your Cuckoo VM 4. Submit a sample and get some results… @securebyte

#Github #MalwareAnalysis Cuckoo VM for Malware Analysis By binaryzone If you do not want to put some time in installing your own Cuckoo Sandbox for different reasons, then you could just download the Virtual Machine (VM) that I have prepared. What I’ve done is get Cuckoo to run in a VM, so you might be asking what does that mean? Well, it means that first Cuckoo is running in a VM and second that Cuckoo will be running its analysis within another VM. Yes, a VM in another VM or what is technically called “Nested Virtualization“. I used VMWare for my VM, but since I’ve exported it to OVA, then you should be good to just import and run. 🌐 More info and download @securebyte

#Article #Exploit 📗Binary Exploitation: Format String Vulnerabilities series ➖By : Vickie Li Welcome to the binary exploitation series! In the coming posts, we are going to explore concepts and tricks used in binary exploitation. I hope you’re as excited as I am! 🌐 Article Link @securebyte

#Course #MalwareAnalysis 📗Introduction to Malware Analysis and Reverse Engineering (2017-2018-2020) University of Cincinnati. ➖Week 01: Introduction to VirtualBox and Lab VMs ➖Week 02: Intro to malware taxonomy / building a basic attack ➖Week 03: Deconstruct attack with static analysis ➖Week 04: x86 disassembly and analysis ➖Week 05: Dynamic analysis, networking, Immunity Intro ➖Week 06: Immunity Debugger analysis workflows ➖Week 07: Mid-Term Project week #1, no class ➖Week 08: Run-time analysis with debugger / inetsim / etc. ➖Week 09: Identification with Yara and other tools ➖Week 10: Spring break - NO CLASS ➖Week 11: Using ELK to analyze behavioral logs ➖Week 12: Java & SWF malware analysis ➖Week 13: Android Malware analysis tools, setup ➖Week 14: Android malware static analysis ➖Week 15: Android malware live analysis ➖Week 16: Finals week - Final project 🌐 https://class.malware.re/ @securebyte

#Article #ReverseEngineering #Android 📗How to start Reverse Engineering on Android Application Series (6 Parts) ➖By: Ankit Mishra 🌐 Part 1 - More Parts, Exist in Author's Profile @securebyte

#Article #ReverseEngineering #Android 📗Android App Reverse Engineering 101 ➖This workshop will be wholly based on reverse engineering through static analysis, or analyzing and understanding an application by examining its code. Table of Contents ➖Introduction ➖Android Application Fundamentals ➖Getting Started with Reversing Android Apps ➖Reverse Engineering Android Apps - DEX Bytecode ➖Reverse Engineering Android Apps - Native Libraries ➖Reverse Engineering Android Apps - Obfuscation ➖Conclusion 🌐 Workshop Link @SecureByte

#eBook #Security 📗Web Application Security: Exploitation and Countermeasures for Modern Web Applications ➖Format : EPUB ➖By: Andrew Hoffman ➖Pages: 330 ➖Publisher: O'Reilly ➖Pub Date: 2020 ➖ISBN : 978-1492053118 @securebyte

سلام خدمت دوستان و همراهان گرامی با توجه به اعلام قبلی مبنی بر توسعه و آماده سازی زیر ساخت های آموزشی، کلاس های حضوری، آنلاین و دوره های مالتی مدیا از سال آینده به امید خدا برگزار خواهند شد که حتما در پستی مجزا به این موضوع مفصل می پردازم که چه تغییراتی در روند فعالیت ها رخ داده و یا در حال تغییر می باشند. تشکر از دوستانی که تا به امروز پیگیر این موضوع بودند و همیشه ما را دنبال می کنند. @securebyte

#Misc #News تلگرام برای رفع فیلترش در روسیه در آپدیت جدید کسانی که فقط یکبار با آیپی روسیه وارد تلگرام شوند رو برای همیشه کاربر روسی شناسایی میکنه و تلگرام رو براشون رفع فیلتر میکنه. یرای اینکار میتوانید یکی از فیلتر شکن هایی که امکان وصل شدن به روسیه را به شما میده نصب کنید و بعد از اتصال وارد تلگرام شوید و در نهایت میتوانید فیلتر شکن خودتون را غیر فعال کنید و اینبار بدون فیلتر شکن وارد تلگرام بشید. Seed4vpn PowerVpn GreenNetVpn UrbanVPN نکته : ✅اگر از چندین اکانت استفاده میکند باید برای همه اکانت ها اینکار را انجام بدید ✅ممکنه اگر از VPN ی استفاده کنید که آیپی از کشور دیگه ای به شما اختصاص بده نیاز باشه مجدد تلگرام را به آیپی روسیه وصل کنید @securebyte

#Misc #News Microsoft made a commitment to provide 10 years of product support for Windows 7 when it was released on October 22, 2009. When this 10-year period ends, Microsoft will discontinue Windows 7 support so that we can focus our investment on supporting newer technologies and great new experiences. The specific end of support day for Windows 7 will be January 14, 2020. @securebyte

With Best Wishes 💜💜 Yashar Mahmoudnia @securebyte