Source Byte

#fact

IDA Pro on Linux Link #reverse @islemolecule_source

Take a look into the depths of Windows kernels and reveal more than 60000 undocumented structures https://www.vergiliusproject.com/kernels #windows ——— @islemolecule_source

NullSection - An Anti-Reversing Tool That Applies A Technique That Overwrites The Section Header With Nullbytes Link #reverse ——— @islemolecule_source

DJI - The ART of obfuscation Link ——— @islemolecule_source

cross-platform backdoor/reverse shell written in Python3 Link #malware_dev ——— @islemolecule_source

You may Wana know why we are not active like before, this is my new room and setup I will active soon Rate my setup plz 👁👄👁

HOOKING 101 https://pdfs.semanticscholar.org/cb60/31f2d6eaa50d18a1ce5c648aa6c12e15fb23.pdf #malware_dev ——— @islemolecule_source

From CreateProcess() to NtCreateUserProcess() Link #malware_dev ——— @islemolecule_source

Windows Defender Detection Mitigation Bypass Vulnerability Win LPE В 2022 году hyp3rlinx рассказывал как можно обойти windows defender передав дополнительный путь при ссылке на mshtml, дырку пофиксили. НО, добавив пару запятых в старый трюк - и опять bypass. * то есть было и пофиксили: C:\sec>rundll32.exe javascript:"\..\..\mshtml,RunHTMLApplication ";alert(666) магия запятой: C:\sec>rundll32.exe javascript:"\..\..\mshtml,,RunHTMLApplication ";alert(666) собака старая, трюки новые. CVE пока не имеет ) #defender #bypass

Reverse engineering of Android Phoenix RAT Analysis: link Phoenix overview: link #malware_analysis ——— @islemolecule_source

Analyzing Mutation Coded VM Protect Link #packer ——— @islemolecule_source

https://drive.google.com/drive/folders/0By8giYopjXKPYjJSTGFwZHR0RUU #books ——— @islemolecule_source

پیاده سازی APC Injection در C Link #malware_dev ——— @islemolecule_source

We are preparing for Valentine's day. We are now known as vx-uwu

UwU theme for x64dbg https://github.com/OALabs/uwudbg-theme

Coyote: A multi-stage banking Trojan abusing the Squirrel installer Link #malware_analysis ——— @islemolecule_source