uz
Feedback

Firibgarlarga uchmang! Telemetrio bunday kanallarni topadi va belgilaydi 👉 Belgini ko‘rmoqchi bo‘lsangiz, obuna bo‘ling

Source Byte

Source Byte

Kanalga Telegram’da o‘tish

هشیار کسی باید کز عشق بپرهیزد وین طبع که من دارم با عقل نیامیزد Saadi Shirazi 187

Ko'proq ko'rsatish
8 570
Obunachilar
+224 soatlar
+467 kun
+21130 kun
Postlar arxiv
Black hat: process injection techniques - Gotta catch them all https://youtu.be/xewv122qxnk?si=MvVaE9RLQCPQ67wn #malware_analysis #malware_dev

Ali
Techniques that i will cover here:
[x] Inject Dll in remtote process using CreateRemoteThread API.
[x] Inject Dll in remtote process using SetWindowsHookExW API.
[x] Inject ShellCode in remtote process using CreateRemoteThread API.
[x] Inject ShellCode in remote process using QueueUserAPC API.
[x] Inject ShellCode in remote process using Early Bird Technique.
[x] Inject ShellCode in remote process using TLS CallBack Technique.
[x] Inject using Thread execution hijacking.
[x] Inject Dll in remtote process using Reflective DLL injection.
[x] inject using Process Hollowing.
[x] inject using Process Doppelganging.
[ ] inject using Atom Bombing.
[x] inject using Process Ghosting.
[x] inject and persist using Image File Execution Options.
[x] inject using using AppInit_DLLs Registry.
[x] inject using using AppCertDlls Registry.
https://github.com/MahmoudZohdy/Process-Injection-Techniques/tree/main #malware_dev

Mitre : Process injection Sub-techniques(12) https://attack.mitre.org/techniques/T1055/ #malware_dev

us-19-Kotler-Process-Injection-Techniques-Gotta-Catch-Them-All.pdf

#meme
#meme

Horse Shell analysis (TP-Link routers malware by chinese APT Camaro Dragon) Credits @_CPResearch_ buff.ly/42WZ8zW #malware ,
Horse Shell analysis (TP-Link routers malware by chinese APT Camaro Dragon) Credits @_CPResearch_ buff.ly/42WZ8zW #malware , #IoT ,

New PoolParty Process Injection Techniques Outsmart Top EDR Solutions thehackernews.com/2023/12/ne… #EDR , #process_injection
New PoolParty Process Injection Techniques Outsmart Top EDR Solutions thehackernews.com/2023/12/ne… #EDR , #process_injection

The path from a C project and assembler to shellcode https://www.orderofsixangles.com/translations/2021/06/12/shellcoding.html #shellcode

Writing shellcode for Windows in assembler https://habr.com/en/articles/522966/ #shellcode

Writing shellcode for Windows in assembler https://habr.com/en/articles/522966/ #shellcode

17065-manual-shellcode.pdf

Shellcoding for Linux and Windows Tutorial https://www.vividmachines.com/shellcode/shellcode.html

How to Write Shellcode for Shellcode Injection and Simplify Assembly Code Development https://medium.com/@muchiemma/how-to-write-shellcode-for-shellcode-injection-and-simplify-assembly-code-development-703c3f214c46 #malware_dev #shellcode

How to Write Shellcode for Shellcode Injection and Simplify Assembly Code Development https://medium.com/@muchiemma/how-to-write-shellcode-for-shellcode-injection-and-simplify-assembly-code-development-703c3f214c46 #malware_dev #shellcode

Repost from Zer0Day Lab
#BlackHat Europe 2023: "A Technical Analysis of a HeadCrabMalware and the Mind Behind It", 2023.