Proxy Bar

Kanalga Telegram’da o‘tish

Exploits, Hacking and Leaks Чат группы - https://t.me/chat_proxy_bar Связь с администрацией и реклама: @NULL_vm Поддержать проект: BTC bc1qmrt229eghjyj9wqa7nmr9j8zuq6khz6km2pker

Ko'proq ko'rsatish

Rossiya32 792 Texnologiyalar & Aralashmalar6 561...

📈 Telegram kanali Proxy Bar analitikasi

Proxy Bar (@proxy_bar) Rus til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 20 633 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 6 561-o'rinni va Rossiya mintaqasida 32 792-o'rinni egallagan.

📊 Auditoriya ko‘rsatkichlari va dinamika

невідомо sanasidan buyon loyiha tez o‘sib, 20 633 obunachiga ega bo‘ldi.

09 Iyun, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 168 ga, so‘nggi 24 soatda esa 4 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.

Tasdiqlash holati: Tasdiqlanmagan
Jalb etish (ER): Auditoriya o‘rtacha 19.36% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 12.83% ini tashkil etuvchi reaksiyalarni to‘playdi.
Post qamrovi: Har bir post o‘rtacha 3 994 marta ko‘riladi; birinchi sutkada odatda 2 647 ta ko‘rish yig‘iladi.
Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 13 ta reaksiya keladi.
Tematik yo‘nalishlar: Kontent cve-2025, exploit, linux, birth, define kabi asosiy mavzularga jamlangan.

📝 Tavsif va kontent siyosati

Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“Exploits, Hacking and Leaks Чат группы - https://t.me/chat_proxy_bar Связь с администрацией и реклама: @NULL_vm Поддержать проект: BTC bc1qmrt229eghjyj9wqa7nmr9j8zuq6khz6km2pker”

Yuqori yangilanish chastotasi (oxirgi ma’lumot 10 Iyun, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.

20 633

Obunachilar

+424 soatlar

+257 kunlar

+16830 kunlar

3 994

Post ko'rishlar

~ 2 64724 soatlar

~ 2 99248 soatlar

19.36%

Muloqot nisbati

~ 2

Kuniga postlar

Ads index

beta

Postlar arxiv

20 632

ITScape: Guest-to-Host Escape in KVM/arm64 * ALL in ONE

20 632

ЧТО то мне эта копирка сильно напоминает, ну слово в слово read #damage #рукалицо

20 632

Covert Kernel/User Communication Channels on Windows: Rootkits, Game Cheats, and Detection Original text: “Covert Kernel/User Communication Channels on Windows: Rootkits, Game Cheats, and Detection” — kernullist, Kernullist’s Blog (Jun 10, 2026). Classification tables, ASCII flow diagrams, and C-language structure declarations below are reproduced verbatim with attribution captions. Executive Summary A modern Windows kernel-assisted threat is almost never a single user-mode binary doing all the work. It… https://core-jmp.org/2026/06/covert-kernel-user-communication-channels-windows-rootkits-cheats-detection/

20 632

Patching the Windows Kernel via BYOVD: ThrottleStop.sys, MmMapIoSpace and the NtAddAtom Trampoline Original text: “Whoops! I did it again. I patched Windows Kernel at Milan0day 2026” — zer0matt, zer0matt’s blog (29 May 2026). PoC: github.com/zer0matt/Milan0day2026. Diagrams below are reproduced from the original with attribution; prose is paraphrased. Executive Summary zer0matt’s Milan0day 2026 talk and accompanying writeup demonstrate a clean Bring Your Own Vulnerable Driver (BYOVD) chain that… https://core-jmp.org/2026/06/patching-windows-kernel-byovd-throttlestop-mmmapiospace-ntaddatom/

20 632

Client-Side Container Attack: DLL Sideloading wab.exe via Email Archive Delivery Original text: “Initial access. Client side container attack” — Leigh Gilbert, Exploitz (exploitz.ca, June 2026). The diagrams below are reproduced with attribution; prose is paraphrased. MITRE ATT&CK reference: T1574.001 — DLL Search Order Hijacking. Executive Summary Leigh Gilbert’s walkthrough chains together a long-known but still effective initial-access pattern: ship a signed Microsoft binary that has… https://core-jmp.org/2026/06/client-side-container-attack-dll-sideloading-wab-exe-email-archive/

20 632

Microsoft Defender Now Monitors Remote RPC Activity: What It Catches and How to Hunt Original text: “Microsoft Defender now monitors RPC activity” — EdanZwick, Microsoft Tech Community / Microsoft Defender for Endpoint Blog (08 Jun 2026). The three KQL hunting queries below are reproduced verbatim with attribution. Prose is paraphrased; for the Defender XDR alert / detection screenshots, see the original post. Executive Summary Microsoft has extended Defender’s existing… https://core-jmp.org/2026/06/microsoft-defender-monitors-remote-rpc-activity/

20 632

OOBdump: Single-Shot Heap-OOB Exploitation of objdump -g via FR30 Relocations Original text: “OOBdump: Relocation Oriented Programming” — Calif, blog.calif.io (08 Jun 2026, no individual byline). PoCs and writeups: github.com/califio/publications/…/oobdump. Short illustrative code excerpts and the original article’s diagrams are reproduced with attribution; the prose is paraphrased. Executive Summary The Calif team has been quietly collecting trophy bugs in reverse-engineering tooling for a while — IDA… https://core-jmp.org/2026/06/oobdump-objdump-fr30-relocation-oriented-programming/

20 632

BusyWork: Replacing Sleep with Real Work to Break Behavioral Detection Original text: “BusyWork: Replacing Sleep with Real Work to Break Behavioral Detection” — patchi.fyi (07 Jun 2026, byline shows only the site handle — author not publicly attributed). Library source: github.com/PatchRequest/BusyWork. Short illustrative code excerpts are reproduced with attribution; longer routines are summarised — consult the upstream repo for full sources. Executive Summary A thread… https://core-jmp.org/2026/06/busywork-replacing-sleep-with-real-work-behavioral-detection/

20 632

BOF Cocktails in Cobalt Strike: Instrumenting BOFs with BEACON_INLINE_EXECUTE and Crystal Palace Original text: “BOF Cocktails in Cobalt Strike” — Rasta Mouse, rastamouse.me (05 Jun 2026). Code blocks and the screenshot below are reproduced verbatim from the source with attribution. Executive Summary Post-exploitation Beacon Object Files (BOFs) historically inherited their evasion posture from whatever agent or loader executed them. If the loader took care of unhooking, masking,… https://core-jmp.org/2026/06/bof-cocktails-cobalt-strike-beacon-inline-execute-crystal-palace/

20 632

Qualcomm QAIC Kernel Driver Page Use-After-Free: From Stale Mmap to Pipe-Buffer-Backed Kernel R/W (Walk-through of Lukas Maar’s Linux v6.18 Exploit) Original text: “Privilege Escalation via a Page Use-After-Free in Qualcomm’s AI Accelerator Linux Kernel Driver” — Lukas Maar, Security Blog (23 May 2026). Code blocks and figures below are reproduced verbatim with attribution captions. Executive Summary Lukas Maar’s post writes up a clean page-level use-after-free in the upstream drivers/accel/qaic Linux kernel driver. The bug is… https://core-jmp.org/2026/06/qualcomm-qaic-kernel-driver-page-uaf-pipe-buffer-kernel-rw-lukas-maar/

20 632

CVE-2026-23631 DarkReplica * Redis Post-Auth RCE Exploit

20 632

Social Engineering: Attacking Networks with a BadUSB-ETH, Part 2 Original text by CO11ATERAL A small USB device can cause a lot of damage when it’s physically plugged into a machine. In this scenario, a BadUSB turns a connection into a bridge for capturing authentication data and gaining network access, even on locked systems. Welcome back, aspiring cyberwarriors! In Part 1, we set the foundation… https://core-jmp.org/2026/06/social-engineering-attacking-networks-with-a-badusb-eth-part-2/

20 632

Reverse-engineering Valorant’s Vanguard Guarded Regions: PML4 Cloning, CR3 Swaps, and the SwapContext Hook PoC (Walk-through of Xyrem’s Post) Original text: “In-depth analysis on Valorant’s Guarded Regions” — Xyrem, reversing.info (2023). Code blocks and figures below are reproduced verbatim with attribution captions. Executive Summary Riot’s Vanguard anti-cheat keeps a slice of Valorant’s game state in memory that is, from any other process or unprivileged thread’s point of view, simply not mapped. Xyrem’s post walks… https://core-jmp.org/2026/06/reverse-engineering-valorant-vanguard-guarded-regions-pml4-cr3-swap-context-hook/

20 632

Red Team Tactics: Utilizing Syscalls in C# — Writing the Code (Walk-through of Jack Halon’s Direct-Syscall PoC) Original text: “Red Team Tactics: Utilizing Syscalls in C# – Writing The Code” — Jack Halon, Jack Hacks (16 April 2020, updated). Code blocks and figures below are reproduced verbatim with attribution captions. Executive Summary Jack Halon’s second “Utilizing Syscalls in C#” post is the implementation half of the series: take the conceptual understanding of… https://core-jmp.org/2026/06/red-team-tactics-utilizing-syscalls-in-csharp-writing-the-code/

20 632

Hidden HTTP/2 Bomb * FOR nginx, Apache httpd, Microsoft IIS, Envoy, Cloudflare Pingora * WriteUP + LABs + PoCs

20 632

One Click, One Hash: Unpatched NTLM Coercion in Windows Search URI Handler Original text by Andrew Schwartz Key Takeaways Same bug class. No CVE. No fix. The NTLM coercion primitive in the Windows search: URI handler is technically identical to CVE-2026-33829 in the Snipping Tool. Same severity rating, same mechanism, same potential impact. Microsoft closed it without a CVE or a patch, describing its triage process as… https://core-jmp.org/2026/06/one-click-one-hash-unpatched-ntlm-coercion-in-windows-search-uri-handler/

20 632

Bypassing Windows Defender and AMSI: A Practical Defense Evasion Guide for Red Team Operators Original text: “Обход Windows Defender и AMSI: практический гайд по defense evasion для Red Team” — Сергей Попов, Codeby.net (21 April 2026). Code blocks below are reproduced verbatim with attribution captions. Executive Summary Modern Microsoft Defender is not a single antivirus process — it is a stack of independent layers (static engine, kernel-mode filesystem filter,… https://core-jmp.org/2026/06/bypassing-windows-defender-amsi-defense-evasion-red-team-guide/

20 632

Two-Shot Kernel Shellcode: Bypassing CR4 Pinning With KProbes for Linux Kernel Control-Flow Hijack to Shellcode Original text: “Revisiting Two-Shot Kernel Shellcode Execution From Control Flow Hijacking” — zolutal, zolutal’s blog (10 February 2026). Code blocks below are reproduced verbatim with attribution captions. Executive Summary Andrey Konovalov’s 2017 Project Zero write-up showed a clean way to turn a control-flow hijack on the Linux kernel into shellcode execution: pivot into native_write_cr4 with… https://core-jmp.org/2026/06/two-shot-kernel-shellcode-cr4-pinning-bypass-kprobes/

20 632

Kernel Karnage Part 1: Patching Windows Kernel Callbacks to Disable EDR from a Driver Original text: “Kernel Karnage – Part 1” — Sander (@cerbersec), NVISO Labs (21 October 2021). Code blocks and figures below are reproduced verbatim with attribution captions. Executive Summary The first post of NVISO Labs’ Kernel Karnage series walks through the opening move of an EDR-bypass research project: write a small Windows kernel driver, locate the… https://core-jmp.org/2026/06/kernel-karnage-part-1-patching-windows-kernel-callbacks-edr-bypass/