Source Byte

Injecting Malicious Code into PDF Files and Creating a PDF Dropper PDF files are often considered static documents by most people. However, the PDF standard allows for the execution of JavaScript code within the document. This feature offers various attack vectors that can be used for Red Team tests and cybersecurity research. In this article, we will examine how to inject JavaScript into a PDF file to download a file from a specific URL and establish a Command and Control (C2) connection using this method. https://cti.monster/blog/2024/07/25/pdfdropper.html

با سلام و خسته نباشید خدمت همه عزیزان عذرخواهی ویژه بابت تاخیر طولانی، بخش دوم دوره SCE 450 با همون فرمون قبلی خدمت شما عزیزان 😁🌹🙏🏻

با سلام و خسته نباشید خدمت همه عزیزان عذرخواهی ویژه بابت تاخیر طولانی، بخش دوم دوره SCE 450 با همون فرمون قبلی خدمت شما عزیزان 😁🌹🙏🏻

Syscalls via Vectored Exception Handling https://redops.at/en/blog/syscalls-via-vectored-exception-handling GitHub

https://github.com/vxCrypt0r/AMSI_VEH

A PowerShell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, function hooking or Import Address Table (IAT) modification.

APC Series: User APC Internals Credit: @0xrepnz

https://repnz.github.io/posts/apc/kernel-user-apc-api

#windows #internals #apc #note

Поскольку контента нет, напомню, что есть бложик с каким-то количество всяких статей ブログ.きく.コム В том числе подборка кучи всяких полезностей, связанных с ревёрсом ブログ.きく.コム/2021/10/02/Reverse-Engineering-Roadmap/ 😎❤️

Understanding ETW Patching Credit: jsecurity101 https://jsecurity101.medium.com/understanding-etw-patching-9f5af87f9d7b #internals #windows #ETW

hell yeah , my teacher MR.Amirheidari achieved rank 72 on microsoft's MSRC leaderboard i think i have more excitement than he has 😂 https://msrc.microsoft.com/leaderboard

APT1

aka: Brown Fox, Byzantine Candor, COMMENT PANDA, Comment Crew, Comment Group, G0006, GIF89a, Group 3, PLA Unit 61398, ShadyRAT, TG-8223

PLA Unit 61398 (Chinese: 61398部队, Pinyin: 61398 bùduì) is the Military Unit Cover Designator (MUCD)[1] of a People's Liberation Army advanced persistent threat unit that has been alleged to be a source of Chinese computer hacking attacks * Download samples * #APT #APT1 #PAPER

series on virtualization technologies and internals of various solutions (QEMU, Xen and VMWare) Credit: @LordNoteworthy [ 0 ] Intro: virtualization internals part 1 intro to virtualization [ 1 ] VMWare: Virtualization Internals Part 2 - VMWare and Full Virtualization using Binary Translation [ 2 ] Xen: Virtualization Internals Part 3 - Xen and Paravirtualization [ 4 ] QEMU: Virtualization Internals Part 4 - QEMU ——- related posts : [ 0 ] Writing a simple 16 bit VM in less than 125 lines of C [ 1 ] Write your Own Virtual Machine [ 2 ] notes on vm and qemu escape exploit [ 3 ] notes on VMware escape exploits by version [ 4 ] Unpack VMProtect #VM , #cve_analysis , #VM_internals —- https://t.me/Source_byte

𝗠𝗮𝗹𝘄𝗮𝗿𝗲 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗺𝗲𝗻𝘁, 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀 𝗮𝗻𝗱 𝗗𝗙𝗜𝗥 𝗦𝗲𝗿𝗶𝗲𝘀 👾 🔗 Part 1 :- https://azr43lkn1ght.github.io/Malware%20Development,%20Analysis%20and%20DFIR%20Series%20-%20Part%20I/ 🔗 Part 2 :- https://azr43lkn1ght.github.io/Malware%20Development,%20Analysis%20and%20DFIR%20Series%20-%20Part%20II/ 🔗 Part 3 :- https://azr43lkn1ght.github.io/Malware%20Development,%20Analysis%20and%20DFIR%20Series%20-%20Part%20III/ 🔗 Part 4 :- https://azr43lkn1ght.github.io/Malware%20Development,%20Analysis%20and%20DFIR%20Series%20-%20Part%20IV/ @source_chat #maldev #malware #development #analysis #dfir #digitalforensic #incidentresponse

ملیکا تو مال منی