🥅 Evil Routing: Pulling Off a Sophisticated Wi‑Fi Man‑in‑the‑Middle (MITM) Attack

#mitm #sniffer

@ZwLowLevel

1️⃣ nt-load-order Part 1: WinDbg'ing our way into the Windows bootloader

2️⃣ nt-load-order Part 2: More than you ever wanted to know

#windows_internals #reverse_engineering
#windbg #bootloader

@ZwLowLevel

👣 Pwning the Domain: Lateral Movement.

• Lateral movement in red teaming is all about moving between targets in the environment to reach the objective.

- Password;
- WinRM;
- RDP;
- MSSQL;
- SMB;
- Interactive-shell;
- NTHash;
- Pass-the-Hash;
- Overpass-the-Hash;
- Pass-the-Key;
- MSSQL;
- Execute OS Commands;
- Trusted Link Abuse in MS SQL;
- SCCM (MECM);
- Credential Harvest;
- Network Access Account;
- Client Push Credentials;
- Application & Script Deployment;
- Security Research.

#AD #Пентест

😈 String Obfuscator

#obfuscate #anti_debugging
#anti_analysis

@ZwLowLevel
https://github.com/JungliBro/obfuscator

🛡 Landlock-ing Linux

Landlock is a Linux Security Module (LSM) available since Linux 5.13. Unlike MAC frameworks such as SELinux or AppArmor, Landlock applies transient restrictions: policies are created at runtime, enforced on the current thread and its future descendants, and disappear when the process exits.

#linux_kernel #linux_internals

@ZwLowLevel
https://blog.prizrak.me/post/landlock/

🐒 Malware development part 2 - anti dynamic analysis & sandboxes

#malware_development #maldev
#anti_debugging #anti_analisys

@ZwLowLevel
https://0xpat.github.io/Malware_development_part_2/

📱 Hacking the Xbox

#reverse_engineering #reversing
#xbox_hacking

@ZwLowLevel
https://bunniefoo.com/nostarch/HackingTheXbox_Free.pdf

🎁 Extending Kernel Race Windows Using '/dev/shm'

#linux_kernel #ring_0
#linux_exploitation
#exploitation

@ZwLowLevel
https://faith2dxy.xyz/2025-11-28/extending_race_window_fallocate/

😽 Sophisticated but buggy malware packer

#malware_analysis
#malware_spreading
#cyber_threat_intelligence
#cti

@ZwLowLevel

😁 Patching Pulse Oximeter Firmware

#reverse_engineering
#firmware_analysis

@ZwLowLevel
https://stefan-gloor.ch/pulseoximeter-hack

Cazando los handles de sistema 🪟

🔥 Building a Windows Kernel-Mode Driver for Process Hiding (Rootkit Techniques)

#windows_internals #windows_kernel
#rootkit #malware_development

@ZwLowLevel

👻 EDR evasion primer

#edr_bypass #edr_evasion

@ZwLowLevel