Text editor in c

https://youtube.com/playlist?list=PLWZxDaGQjf0sgrCJXH-OjMQQUcQlFcUsP&si=OJZUtykZ-xBSCY_l

@GoSecurity
#C

بحث با انسان‌های کودن و احمق
اونارو باهوش‌تر نمی‌کنه، شمارو به‌ کودن شدن نزدیک‌ می‌کنه.

Windows rootkits guide

@GoSecurity
#windows #rootkit

i really like malware

Zero Day Ransomware vs Popular Antivirus and EDR

@GoSecurity
#raas #ransomware #malware #edr #Av

CVE-2026-21508 - Windows LPE via arbitrary COM object initialization

The vulnerability essentially works by forcing a process running as system and that uses the undocumented function Windows_Storage!_SHCoCreateInstance, to create an arbitrary COM object of our choice. For this to happen the object must be associated with an already registered COM class that supports CLSCTX_INPROC_SERVER. Arbitrary COM object creation is archived by manipulating a CoCreateInstance call first argument

@GoSecurity
#CVE #LPE #DFIR #blueteam

A custom Linux beacon for Cobalt Strike

While official Cobalt Strike does not natively support generating Linux beacons, the author says that it is possible to build custom implants for Cobalt Strike on virtually any platform. The only requirement is that the implant communicates correctly with the teamserver

https://github.com/EricEsquivel/CobaltStrike-Linux-Beacon

@GoSecurity
#dfir #blueteam #threathunting #c2 #redteam #cobalt