NEW BOT Телеграм, страница

Windows Early Boot DSE Bypass Solution

Loading Unsigned Drivers on Windows 11 25H2: Boot-Time DSE Bypass via SeCiCallbacks Manipulation.
#bootloader #driver_signature_enforcement #windows_kernel #dse_bypass

@ZwLoWLevel

https://github.com/wesmar/KernelResearchKit

GitHub

GitHub - wesmar/KernelResearchKit: Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot…

Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by surgically patching SeCiCallbacks via native subsystem. Inclu...

46 views19:57

Low Level CO 🇨🇴

Inside the Rise of AI-Powered Pharmaceutical Scams
#scam #ai #scampages

@ZwLowLevel

https://blog.checkpoint.com/healthcare/inside-the-rise-of-ai-powered-pharmaceutical-scams/

Check Point Blog

Inside the Rise of AI-Powered Pharmaceutical Scams - Check Point Blog

Introduction Over the past few months, we identified an emerging online threat that combines fraud, social engineering, and genuine health risks. Scammers

50 views21:08

Low Level CO 🇨🇴

PromptJacking: Critical RCEs in Claude Desktop That Turn Questions Into Exploits

#rce #exploit

@ZwLowLevel

www.koi.ai

PromptJacking: The Critical RCEs in Claude Desktop That Turn Questions Into Exploits

Critical RCE flaws in Claude Desktop (“PromptJacking”) let attackers turn simple user questions into dangerous exploits, risking data security.

46 views06:35

Low Level CO 🇨🇴

Red Team Simulation with AdaptixC2: Phishing to Beacon

#adaptixc2 #c2 #malware_spreading #malware

@ZwLowLevel

Medium

Red Team Simulation with AdaptixC2: Phishing to Beacon (Lab exercise)

Introduction

45 views06:38

Low Level CO 🇨🇴

Ransomvibing appears in VS Code extensions
#vs_code #ransomvibing

@ZwLowLevel

https://secureannex.com/blog/ransomvibe/

Secure Annex

Ransomvibing appears in VS Code extensions

Vibe coded ransomware has successfully been published to the Visual Studio extension marketplace

45 views13:57

Low Level CO 🇨🇴

Windows Memory Introspection with IceBox
#windows_internals #windows_kernel #virtual_memory #virtual_machine_introspection #page_table

@ZwLowLevel

https://blog.thalium.re/posts/windows-full-memory-introspection-with-icebox/

THALIUM

Windows Memory Introspection with IceBox

Virtual Machine Introspection (VMI) is an extremely powerful technique to explore a guest OS. Directly acting on the hypervisor allows a stealth and precise control of the guest state, which means its CPU context as well as its memory.
Basically, a common…

49 viewsedited 14:38

Low Level CO 🇨🇴

BlackPill

BlackPill is a stealthy Linux rootkit made in Rust
#roorkit #linux_kernel #ring0 #ring_0

@ZwLowLevel

https://github.com/rce-3/blackpill

61 views21:08

Low Level CO 🇨🇴

Sat Narayan (feat. Miper)

Hozho

59 views21:22

Low Level CO 🇨🇴

Debugging BeagleBoard USB boot with a sniffer: fixing omap_loader on modern PCs
#beagleboard #debugging #reverse_engineering

@ZwLowLevel

302 views23:45

Low Level CO 🇨🇴

Reverse engineering Codex CLI to get GPT-5-Codex-Mini to draw me a pelican

#gpt_5 #codex_mini #chatgpt #reverse_engineering

@ZwLowLevel

https://simonwillison.net/2025/Nov/9/gpt-5-codex-mini/

Simon Willison’s Weblog

Reverse engineering Codex CLI to get GPT-5-Codex-Mini to draw me a pelican

OpenAI partially released a new model yesterday called GPT-5-Codex-Mini, which they describe as "a more compact and cost-efficient version of GPT-5-Codex". It’s currently only available via their Codex CLI tool …

58 views08:37

Low Level CO 🇨🇴

🛡 NoMoreStealer

A Windows kernel-mode minifilter driver that monitors file system access to protect against information-stealing malware

#minidriver #windows_kernel #defensive_tool #minifilter #ring0