Low Level CO 🇨🇴 – Telegram
Low Level CO 🇨🇴
@ZwLowLevel
122 subscribers
178 photos
10 videos
7 files
540 links
Canal enfocado en la investigación de técnicas de seguridad ofensivas avanzadas.

✅ Windows internals
✅ Malware Development
✅ Exploits & Reversing
✅ Low level programming
✅ kernel mode & user mode
✅ Syscall & Hypercalls
✅ Ring 0, 3, -1
✅ Firmware
Download Telegram
About
Blog
Apps
Platform
Join
Low Level CO 🇨🇴
122 subscribers
Low Level CO 🇨🇴
PromptJacking: Critical RCEs in Claude Desktop That Turn Questions Into Exploits

#rce #exploit
@ZwLowLevel
www.koi.ai
PromptJacking: The Critical RCEs in Claude Desktop That Turn Questions Into Exploits
Critical RCE flaws in Claude Desktop (“PromptJacking”) let attackers turn simple user questions into dangerous exploits, risking data security.
46 views
Low Level CO 🇨🇴
Red Team Simulation with AdaptixC2: Phishing to Beacon

#adaptixc2 #c2 #malware_spreading #malware
@ZwLowLevel
Medium
Red Team Simulation with AdaptixC2: Phishing to Beacon (Lab exercise)
Introduction
45 views
Low Level CO 🇨🇴
Ransomvibing appears in VS Code extensions
#vs_code #ransomvibing

@ZwLowLevel

https://secureannex.com/blog/ransomvibe/
Secure Annex
Ransomvibing appears in VS Code extensions
Vibe coded ransomware has successfully been published to the Visual Studio extension marketplace
45 views
Low Level CO 🇨🇴
Windows Memory Introspection with IceBox
#windows_internals #windows_kernel #virtual_memory #virtual_machine_introspection #page_table

@ZwLowLevel

https://blog.thalium.re/posts/windows-full-memory-introspection-with-icebox/
THALIUM
Windows Memory Introspection with IceBox
Virtual Machine Introspection (VMI) is an extremely powerful technique to explore a guest OS. Directly acting on the hypervisor allows a stealth and precise control of the guest state, which means its CPU context as well as its memory.
Basically, a common…
49 viewsedited  
Low Level CO 🇨🇴
BlackPill

BlackPill is a stealthy Linux rootkit made in Rust
#roorkit #linux_kernel #ring0 #ring_0

@ZwLowLevel

https://github.com/rce-3/blackpill
61 views
Low Level CO 🇨🇴
Sat Narayan (feat. Miper)
Hozho
59 views
Low Level CO 🇨🇴
Debugging BeagleBoard USB boot with a sniffer: fixing omap_loader on modern PCs
#beagleboard #debugging #reverse_engineering

@ZwLowLevel
301 views
Low Level CO 🇨🇴
Reverse engineering Codex CLI to get GPT-5-Codex-Mini to draw me a pelican

#gpt_5 #codex_mini #chatgpt #reverse_engineering

@ZwLowLevel

https://simonwillison.net/2025/Nov/9/gpt-5-codex-mini/
Simon Willison’s Weblog
Reverse engineering Codex CLI to get GPT-5-Codex-Mini to draw me a pelican
OpenAI partially released a new model yesterday called GPT-5-Codex-Mini, which they describe as "a more compact and cost-efficient version of GPT-5-Codex". It’s currently only available via their Codex CLI tool …
57 views
Low Level CO 🇨🇴
🛡 NoMoreStealer

A Windows kernel-mode minifilter driver that monitors file system access to protect against information-stealing malware

#minidriver #windows_kernel #defensive_tool #minifilter #ring0
@ZwLowLevel

https://github.com/EvilBytecode/NoMoreStealers
GitHub
GitHub - EvilBytecode/NoMoreStealers: NoMoreStealers is a Windows file system minifilter driver that protects sensitive user data…
NoMoreStealers is a Windows file system minifilter driver that protects sensitive user data from untrusted processes. - EvilBytecode/NoMoreStealers
🔥1
47 views
Low Level CO 🇨🇴
Low Level CO 🇨🇴
🛡 NoMoreStealer A Windows kernel-mode minifilter driver that monitors file system access to protect against information-stealing malware #minidriver #windows_kernel #defensive_tool #minifilter #ring0 @ZwLowLevel https://github.com/EvilBytecode/NoMoreStealers
Understanding Mini-Filter Drivers for Windows Vulnerability Research & Exploit Development

#minifilter_driver #minidriver #windows_internals #windows_kernel
@ZwLowLevel
Medium
Understanding Mini-Filter Drivers for Windows Vulnerability Research & Exploit Development
Hey everyone! Hope you’re all doing well. As always, I was looking for an interesting Windows internals topic to blog about. I google-d…
52 viewsedited  
Low Level CO 🇨🇴
Media is too big
VIEW IN TELEGRAM
⚙️ Como crear un live memory dump de System usando Task Manager!

#memory_dump #task_manager #windbg

@ZwLowLevel

https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/task-manager-live-dump
🔥2
46 views
Low Level CO 🇨🇴
Kid-cam firmware modding
#firmware_hacking #hardware_hacking

@ZwLowLevel

https://spritesmods.com/?art=kid_cam
44 views
Low Level CO 🇨🇴
Who's that Pokemon? It's Monero!

#cryptojacking #xmr #monero #malware #pokemon
@ZwLowLevel

https://secureannex.com/blog/pokemon-or-cryptominer
Secure Annex
Who's that Pokemon? It's Monero!
How your Pokemon Theme VS Code extension might be a cryptominer in disguise.
48 views
Low Level CO 🇨🇴
Forwarded from Android Security & Malware
Runtime Android Object Instrumentation
https://knifecoat.com/Posts/Runtime+Android+Object+Instrumentation
KnifeCoat
Runtime Android Object Instrumentation - KnifeCoat
Intro This year I have been doing quite a bit Android userland analysis. Android is a wonderful platform to work on, great decompiler support (JEB), easy access to rooted devices (unless you buy NA l…
52 views
Low Level CO 🇨🇴
Evading Elastic EDR's call stack signatures with call gadgets

#call_stack #call_gadgets #edr_bypass #edr_evasion #maldev
@ZwLowLevel

https://offsec.almond.consulting/evading-elastic-callstack-signatures.html
50 views
Low Level CO 🇨🇴
Polymorphic Obfuscation

This example demonstrates basic polymorphic obfuscation techniques, including encryption, variable code structure, and behavioral adaptation.

#obfuscate #polymorphic #edr_bypass
@ZwLowLevel
Gist
This example demonstrates basic polymorphic obfuscation techniques, including encryption, variable code structure, and behavioral…
This example demonstrates basic polymorphic obfuscation techniques, including encryption, variable code structure, and behavioral adaptation. - polymorphic-obfuscation.md
56 views
Low Level CO 🇨🇴
Forwarded from Proxy Bar
This media is not supported in your browser
VIEW IN TELEGRAM
CARDERS !!!
41 views
Low Level CO 🇨🇴
EDR bypasses techniques written in Rust for Windows 10
#rust #malware_development #maldev

@ZwLowLevel

https://github.com/Arasimnida/EDR-bypass-rs
GitHub
GitHub - Arasimnida/EDR-bypass-rs: EDR bypasses techniques written in Rust for Windows 10
EDR bypasses techniques written in Rust for Windows 10 - Arasimnida/EDR-bypass-rs
52 views
Low Level CO 🇨🇴
Moufilrr

Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and allows you to filter or modify your mouse input.

#minifilter_driver #minidriver #windows_kernel
@ZwLowLevel
GitHub
GitHub - Devilasa/Moufiltr: Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and…
Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and allows you to filter or modify your mouse input. - Devilasa/Moufiltr
49 views
Low Level CO 🇨🇴
Proxy: Next Generation Polymorphism in C++
#polymorphic #obfuscation

@ZwLowLevel

https://github.com/microsoft/proxy
GitHub
GitHub - microsoft/proxy: Proxy: Next Generation Polymorphism in C++
Proxy: Next Generation Polymorphism in C++. Contribute to microsoft/proxy development by creating an account on GitHub.
55 views
Low Level CO 🇨🇴
Low Level CO 🇨🇴 pinned «Proxy: Next Generation Polymorphism in C++ #polymorphic #obfuscation @ZwLowLevel https://github.com/microsoft/proxy»