NEW BOT Телеграм, страница

Low Level CO 🇨🇴

Polymorphic Obfuscation

This example demonstrates basic polymorphic obfuscation techniques, including encryption, variable code structure, and behavioral adaptation.

#obfuscate #polymorphic #edr_bypass

Gist

This example demonstrates basic polymorphic obfuscation techniques, including encryption, variable code structure, and behavioral…

This example demonstrates basic polymorphic obfuscation techniques, including encryption, variable code structure, and behavioral adaptation. - polymorphic-obfuscation.md

55 views06:33

Low Level CO 🇨🇴

Forwarded from Proxy Bar

0:10

This media is not supported in your browser

VIEW IN TELEGRAM

CARDERS !!!

40 views10:14

Low Level CO 🇨🇴

EDR bypasses techniques written in Rust for Windows 10
#rust #malware_development #maldev

https://github.com/Arasimnida/EDR-bypass-rs

GitHub

GitHub - Arasimnida/EDR-bypass-rs: EDR bypasses techniques written in Rust for Windows 10

EDR bypasses techniques written in Rust for Windows 10 - Arasimnida/EDR-bypass-rs

51 views14:03

Low Level CO 🇨🇴

Moufilrr

Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and allows you to filter or modify your mouse input.

#minifilter_driver #minidriver #windows_kernel

GitHub

GitHub - Devilasa/Moufiltr: Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and…

Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and allows you to filter or modify your mouse input. - Devilasa/Moufiltr

48 views14:14

Low Level CO 🇨🇴

Proxy: Next Generation Polymorphism in C++
#polymorphic #obfuscation

https://github.com/microsoft/proxy

GitHub

GitHub - microsoft/proxy: Proxy: Next Generation Polymorphism in C++

Proxy: Next Generation Polymorphism in C++. Contribute to microsoft/proxy development by creating an account on GitHub.

54 views18:58

Low Level CO 🇨🇴

Low Level CO 🇨🇴 pinned «Proxy: Next Generation Polymorphism in C++ #polymorphic #obfuscation @ZwLowLevel https://github.com/microsoft/proxy»

19:19

Low Level CO 🇨🇴

A novel technique to instantly retrieve Windows kernel base address with a single instruction

#include <ntddk.h>
#include <intrin.h>
 
  NTSTATUS DriverEntry(PDRIVER_OBJECT pDriverObject, PUNICODE_STRING pRegistryPath)
  {
      UNREFERENCED_PARAMETER(pRegistryPath);
 
      // Get kernel base address
      uintptr_t kernel_base = __readmsr(0xC0000082) & ~0xFFFFFF;
 
      DbgPrint("[+] ntoskrnl.exe base: 0x%llx\n", kernel_base);
 
      // Verify it's a valid PE
      PIMAGE_DOS_HEADER dos = (PIMAGE_DOS_HEADER)kernel_base;
      PIMAGE_NT_HEADERS nt = (PIMAGE_NT_HEADERS)(kernel_base + dos->e_lfanew);
 
      DbgPrint("[+] Image size: 0x%x (%u MB)\n",
               nt->OptionalHeader.SizeOfImage,
               nt->OptionalHeader.SizeOfImage / (1024 * 1024));
 
      pDriverObject->DriverUnload = DriverUnload;
      return STATUS_SUCCESS;
  }
 
  void DriverUnload(PDRIVER_OBJECT pDriverObject)
  {
      UNREFERENCED_PARAMETER(pDriverObject);
      DbgPrint("[-] Driver unloaded\n");
  }

#windows_internals #windows_kernel #ntoskrln #ring0

UnKnoWnCheaTs

Fast ntoskrnl Base Address Resolution via 16MB LSTAR Masking

A novel O(1) technique to instantly retrieve Windows kernel base address with a single instruction。 Code: #include <ntddk.h> #include &lt

49 viewsedited 20:09

Low Level CO 🇨🇴

Multi-Brand themed Phishing Campaign Harvests Credentials via Telegram Bot API
#phishing_campaing #phishing

https://cyble.com/blog/multi-brand-phishing-campaign-harvests-credentials/

43 views07:21

Low Level CO 🇨🇴

Advanced Game Hacking Library (C/C++/Rust/Python)
#game_hacking #libmem #cheat_sheet

https://github.com/rdbo/libmem

GitHub

GitHub - rdbo/libmem: Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory…

Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory Hacking) (Hooking/Detouring) (Cross Platform) (x86/x64) (DLL/SO Injection) (Internal/Externa...

175 views09:57

Low Level CO 🇨🇴

AMD64 Architecture Programmer’s Manual Volume 1:
Application Programming

#os_internals #amd64

https://docs.amd.com/v/u/en-US/24592_3.24

48 views13:23

Low Level CO 🇨🇴

Bypassing EDR Syscall Hooks with a Early Exception Handler

#vectored_exception_handler
#structured_exception_handler
#edr_bypass #windows_internals

43 views17:57

Low Level CO 🇨🇴

Hypervisors for Memory Introspection and Reverse Engineering

#hypervisor #virtual_machine_introspection
#windows_internals
#uefi

https://secret.club/2025/06/02/hypervisors-for-memory-introspection-and-reverse-engineering.html

49 views20:14

Low Level CO 🇨🇴

SharpParty: Process Injection in C#

#process_injection #maldev #edr_bypass #edr_evasion

GitHub

GitHub - strozfriedberg/SharpParty: C# implementation of the process injection techniques dubbed "PoolParty"

C# implementation of the process injection techniques dubbed "PoolParty" - strozfriedberg/SharpParty

167 views07:47

Low Level CO 🇨🇴

🔗

Invoke-PowerChrome

#powershell #offensive_tool

https://github.com/The-Viper-One/Invoke-PowerChrome

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - The-Viper-One/Invoke-PowerChrome: Decrypt Chromium based browser passwords with PowerShell.

Decrypt Chromium based browser passwords with PowerShell. - The-Viper-One/Invoke-PowerChrome

47 views11:40

Low Level CO 🇨🇴

Stack Obfuscator

High performance anti-analysis header for Windows (Kernel & User) and Linux systems

#ring_0 #windows_kerner
#stack_obfuscator #anti_debugging
#anti_analysis