NEW BOT Телеграм, страница

Low Level CO 🇨🇴

Low Level CO 🇨🇴 pinned «Proxy: Next Generation Polymorphism in C++ #polymorphic #obfuscation @ZwLowLevel https://github.com/microsoft/proxy»

19:19

Low Level CO 🇨🇴

A novel technique to instantly retrieve Windows kernel base address with a single instruction

#include <ntddk.h>
#include <intrin.h>
 
  NTSTATUS DriverEntry(PDRIVER_OBJECT pDriverObject, PUNICODE_STRING pRegistryPath)
  {
      UNREFERENCED_PARAMETER(pRegistryPath);
 
      // Get kernel base address
      uintptr_t kernel_base = __readmsr(0xC0000082) & ~0xFFFFFF;
 
      DbgPrint("[+] ntoskrnl.exe base: 0x%llx\n", kernel_base);
 
      // Verify it's a valid PE
      PIMAGE_DOS_HEADER dos = (PIMAGE_DOS_HEADER)kernel_base;
      PIMAGE_NT_HEADERS nt = (PIMAGE_NT_HEADERS)(kernel_base + dos->e_lfanew);
 
      DbgPrint("[+] Image size: 0x%x (%u MB)\n",
               nt->OptionalHeader.SizeOfImage,
               nt->OptionalHeader.SizeOfImage / (1024 * 1024));
 
      pDriverObject->DriverUnload = DriverUnload;
      return STATUS_SUCCESS;
  }
 
  void DriverUnload(PDRIVER_OBJECT pDriverObject)
  {
      UNREFERENCED_PARAMETER(pDriverObject);
      DbgPrint("[-] Driver unloaded\n");
  }

#windows_internals #windows_kernel #ntoskrln #ring0

UnKnoWnCheaTs

Fast ntoskrnl Base Address Resolution via 16MB LSTAR Masking

A novel O(1) technique to instantly retrieve Windows kernel base address with a single instruction。 Code: #include <ntddk.h> #include &lt

50 viewsedited 20:09

Low Level CO 🇨🇴

Multi-Brand themed Phishing Campaign Harvests Credentials via Telegram Bot API
#phishing_campaing #phishing

https://cyble.com/blog/multi-brand-phishing-campaign-harvests-credentials/

44 views07:21

Low Level CO 🇨🇴

Advanced Game Hacking Library (C/C++/Rust/Python)
#game_hacking #libmem #cheat_sheet

https://github.com/rdbo/libmem

GitHub

GitHub - rdbo/libmem: Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory…

Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory Hacking) (Hooking/Detouring) (Cross Platform) (x86/x64) (DLL/SO Injection) (Internal/Externa...

176 views09:57

Low Level CO 🇨🇴

AMD64 Architecture Programmer’s Manual Volume 1:
Application Programming

#os_internals #amd64

https://docs.amd.com/v/u/en-US/24592_3.24

49 views13:23

Low Level CO 🇨🇴

Bypassing EDR Syscall Hooks with a Early Exception Handler

#vectored_exception_handler
#structured_exception_handler
#edr_bypass #windows_internals

44 views17:57

Low Level CO 🇨🇴

Hypervisors for Memory Introspection and Reverse Engineering

#hypervisor #virtual_machine_introspection
#windows_internals
#uefi

https://secret.club/2025/06/02/hypervisors-for-memory-introspection-and-reverse-engineering.html

50 views20:14

Low Level CO 🇨🇴

SharpParty: Process Injection in C#

#process_injection #maldev #edr_bypass #edr_evasion

GitHub

GitHub - strozfriedberg/SharpParty: C# implementation of the process injection techniques dubbed "PoolParty"

C# implementation of the process injection techniques dubbed "PoolParty" - strozfriedberg/SharpParty

167 views07:47

Low Level CO 🇨🇴

🔗

Invoke-PowerChrome

#powershell #offensive_tool

https://github.com/The-Viper-One/Invoke-PowerChrome

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - The-Viper-One/Invoke-PowerChrome: Decrypt Chromium based browser passwords with PowerShell.

Decrypt Chromium based browser passwords with PowerShell. - The-Viper-One/Invoke-PowerChrome

47 views11:40

Low Level CO 🇨🇴

Stack Obfuscator

High performance anti-analysis header for Windows (Kernel & User) and Linux systems

#ring_0 #windows_kerner
#stack_obfuscator #anti_debugging
#anti_analysis

https://github.com/Arty3/Stack-Obfuscator

GitHub

GitHub - Arty3/Stack-Obfuscator: High performance anti-analysis header for Windows (Kernel & User) and Linux systems

High performance anti-analysis header for Windows (Kernel & User) and Linux systems - Arty3/Stack-Obfuscator

40 viewsedited 14:37

Low Level CO 🇨🇴

💻

Windows kernel _EPROCESS offsets list

#windows_internals #windows_kerner
#kernel_structure

https://github.com/I3r1h0n/eprocess_offsets

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - I3r1h0n/eprocess_offsets: Windows kernel _EPROCESS offsets list

Windows kernel _EPROCESS offsets list. Contribute to I3r1h0n/eprocess_offsets development by creating an account on GitHub.

39 views14:47

Low Level CO 🇨🇴

🛡

Kubernetes Pentesting – Part Five: Full etcd Secrets Dump

#cloud_hacking #kurbenetes #cloud_security

https://www.rbtsec.com/blog/kubernetes-pentesting-part-five-full-etcd-secrets-dump/

Please open Telegram to view this post

VIEW IN TELEGRAM

RBT Security | Reinventing The Security

Kubernetes Pentesting – Part Five: Full etcd Secrets Dump | RBT Security

Exploit etcd to exfiltrate cluster secrets. In Part Five we escalate from master access to dumping etcd and extracting tokens and credentials.

205 views19:14

Low Level CO 🇨🇴

💻

I converted a rotary phone into a meeting handset
#hardware

Please open Telegram to view this post

VIEW IN TELEGRAM

www.stavros.io

I converted a rotary phone into a meeting handset - Stavros' Stuff

44 views20:03

Low Level CO 🇨🇴

I didn't reverse-engineer the protocol for my blood pressure monitor in 24 hours

James Belchamber

I didn't reverse-engineer the protocol for my blood pressure monitor in 24 hours - James Belchamber

The personal website of James Belchamber.

47 viewsedited 20:05

Low Level CO 🇨🇴

Fun-reliable side-channels for cross-container communication

https://h4x0r.org/funreliable/

50 views20:17

Low Level CO 🇨🇴

Skins (Ultra Slowed + Reverb)

KREZUS & Surreal_dvd

40 views00:08

Low Level CO 🇨🇴

🔄Project Cerberus: Advanced Windows Payload Generator

Please open Telegram to view this post

VIEW IN TELEGRAM

42 views00:12

Low Level CO 🇨🇴

CVE-2025-54110

Windows Kernel Integer Overflow Privilege Escalation

39 views06:17

Low Level CO 🇨🇴

🎰

Carding and Black Box Attacks: How Today’s Most Common ATM Hack Works

Please open Telegram to view this post

VIEW IN TELEGRAM

38 viewsedited 07:48

Low Level CO 🇨🇴

HalPrivateDispatchTableHook

Hook syscalls from ring0 without triggering PatchGuard

GitHub

GitHub - asteria121/HalPrivateDispatchTableHook: Hook syscalls from ring0 without triggering PatchGuard

Hook syscalls from ring0 without triggering PatchGuard - asteria121/HalPrivateDispatchTableHook

43 views08:12

Low Level CO 🇨🇴

Syscall proxing framework

Trace and control syscalls to accelerate exploit development, reverse engineering, and malware analysis. Intercept, log, and optionally modify system calls.

GitHub

GitHub - t1b4n3/pwntrace: Trace and control syscalls to accelerate exploit development, reverse engineering, and malware analysis.…

Trace and control syscalls to accelerate exploit development, reverse engineering, and malware analysis. Intercept, log, and optionally modify system calls so you can safely emulate environments, s...

48 views15:31

About

Blog

Apps

Platform