NEW BOT Телеграм, страница

Low Level CO 🇨🇴

Forwarded from Proxy Bar

0:10

This media is not supported in your browser

VIEW IN TELEGRAM

CARDERS !!!

40 views10:14

Low Level CO 🇨🇴

EDR bypasses techniques written in Rust for Windows 10
#rust #malware_development #maldev

https://github.com/Arasimnida/EDR-bypass-rs

GitHub

GitHub - Arasimnida/EDR-bypass-rs: EDR bypasses techniques written in Rust for Windows 10

EDR bypasses techniques written in Rust for Windows 10 - Arasimnida/EDR-bypass-rs

51 views14:03

Low Level CO 🇨🇴

Moufilrr

Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and allows you to filter or modify your mouse input.

#minifilter_driver #minidriver #windows_kernel

GitHub

GitHub - Devilasa/Moufiltr: Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and…

Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and allows you to filter or modify your mouse input. - Devilasa/Moufiltr

48 views14:14

Low Level CO 🇨🇴

Proxy: Next Generation Polymorphism in C++
#polymorphic #obfuscation

https://github.com/microsoft/proxy

GitHub

GitHub - microsoft/proxy: Proxy: Next Generation Polymorphism in C++

Proxy: Next Generation Polymorphism in C++. Contribute to microsoft/proxy development by creating an account on GitHub.

54 views18:58

Low Level CO 🇨🇴

Low Level CO 🇨🇴 pinned «Proxy: Next Generation Polymorphism in C++ #polymorphic #obfuscation @ZwLowLevel https://github.com/microsoft/proxy»

19:19

Low Level CO 🇨🇴

A novel technique to instantly retrieve Windows kernel base address with a single instruction

#include <ntddk.h>
#include <intrin.h>
 
  NTSTATUS DriverEntry(PDRIVER_OBJECT pDriverObject, PUNICODE_STRING pRegistryPath)
  {
      UNREFERENCED_PARAMETER(pRegistryPath);
 
      // Get kernel base address
      uintptr_t kernel_base = __readmsr(0xC0000082) & ~0xFFFFFF;
 
      DbgPrint("[+] ntoskrnl.exe base: 0x%llx\n", kernel_base);
 
      // Verify it's a valid PE
      PIMAGE_DOS_HEADER dos = (PIMAGE_DOS_HEADER)kernel_base;
      PIMAGE_NT_HEADERS nt = (PIMAGE_NT_HEADERS)(kernel_base + dos->e_lfanew);
 
      DbgPrint("[+] Image size: 0x%x (%u MB)\n",
               nt->OptionalHeader.SizeOfImage,
               nt->OptionalHeader.SizeOfImage / (1024 * 1024));
 
      pDriverObject->DriverUnload = DriverUnload;
      return STATUS_SUCCESS;
  }
 
  void DriverUnload(PDRIVER_OBJECT pDriverObject)
  {
      UNREFERENCED_PARAMETER(pDriverObject);
      DbgPrint("[-] Driver unloaded\n");
  }

#windows_internals #windows_kernel #ntoskrln #ring0

UnKnoWnCheaTs

Fast ntoskrnl Base Address Resolution via 16MB LSTAR Masking

A novel O(1) technique to instantly retrieve Windows kernel base address with a single instruction。 Code: #include <ntddk.h> #include &lt

49 viewsedited 20:09

Low Level CO 🇨🇴

Multi-Brand themed Phishing Campaign Harvests Credentials via Telegram Bot API
#phishing_campaing #phishing

https://cyble.com/blog/multi-brand-phishing-campaign-harvests-credentials/

43 views07:21

Low Level CO 🇨🇴

Advanced Game Hacking Library (C/C++/Rust/Python)
#game_hacking #libmem #cheat_sheet

https://github.com/rdbo/libmem

GitHub

GitHub - rdbo/libmem: Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory…

Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory Hacking) (Hooking/Detouring) (Cross Platform) (x86/x64) (DLL/SO Injection) (Internal/Externa...

175 views09:57

Low Level CO 🇨🇴

AMD64 Architecture Programmer’s Manual Volume 1:
Application Programming

#os_internals #amd64

https://docs.amd.com/v/u/en-US/24592_3.24

48 views13:23

Low Level CO 🇨🇴

Bypassing EDR Syscall Hooks with a Early Exception Handler

#vectored_exception_handler
#structured_exception_handler
#edr_bypass #windows_internals

43 views17:57

Low Level CO 🇨🇴

Hypervisors for Memory Introspection and Reverse Engineering

#hypervisor #virtual_machine_introspection
#windows_internals
#uefi

https://secret.club/2025/06/02/hypervisors-for-memory-introspection-and-reverse-engineering.html

49 views20:14

Low Level CO 🇨🇴

SharpParty: Process Injection in C#

#process_injection #maldev #edr_bypass #edr_evasion

GitHub

GitHub - strozfriedberg/SharpParty: C# implementation of the process injection techniques dubbed "PoolParty"

C# implementation of the process injection techniques dubbed "PoolParty" - strozfriedberg/SharpParty

167 views07:47

Low Level CO 🇨🇴

🔗

Invoke-PowerChrome

#powershell #offensive_tool

https://github.com/The-Viper-One/Invoke-PowerChrome

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - The-Viper-One/Invoke-PowerChrome: Decrypt Chromium based browser passwords with PowerShell.

Decrypt Chromium based browser passwords with PowerShell. - The-Viper-One/Invoke-PowerChrome

47 views11:40

Low Level CO 🇨🇴

Stack Obfuscator

High performance anti-analysis header for Windows (Kernel & User) and Linux systems

#ring_0 #windows_kerner
#stack_obfuscator #anti_debugging
#anti_analysis