Low Level CO 🇨🇴 – Telegram
Low Level CO 🇨🇴
@ZwLowLevel
130 subscribers
207 photos
13 videos
7 files
618 links
Canal enfocado en la investigación de técnicas de seguridad ofensivas avanzadas.

✅ Windows internals
✅ Malware Development
✅ Exploits & Reversing
✅ Low level programming
✅ kernel mode & user mode
✅ Syscall & Hypercalls
✅ Ring 0, 3, -1
✅ Firmware
Download Telegram
About
Blog
Apps
Platform
Join
Low Level CO 🇨🇴
130 subscribers
Low Level CO 🇨🇴
F.O.O.L & A.L.I.S.O.N - Vibrance
Electronic Gems
Blut Own - Atlas
Dreariness
50 viewsGolden Byte, 
Low Level CO 🇨🇴
skeler x ytho - 丹∨丹尺工匕工丹 (unreleased)
skeler.
47 viewsGolden Byte, 
Low Level CO 🇨🇴
Un tema poco relevante para la filosofía del canal, pero está vez es una excepción:

OPSEC guide BTS


https://bfswa.substack.com/p/opsec-guide-bts
Substack
OPSEC guide BTS
From Frankfurt to WIRED
50 viewsGolden Byte, 
Low Level CO 🇨🇴
🐒 Malware development part 2 - anti dynamic analysis & sandboxes

#malware_development #maldev
#anti_debugging #anti_analisys

@ZwLowLevel
https://0xpat.github.io/Malware_development_part_2/
Please open Telegram to view this post
VIEW IN TELEGRAM
0xpat.github.io
Malware development part 2 - anti dynamic analysis & sandboxes
Introduction
This is the second post of a series which regards development of malicious software. In this series we will explore and try to implement multiple techniques used by malicious applications to execute code, hide from defenses and persist.
Previously…
🔥3
57 viewsGolden Byte, 
Low Level CO 🇨🇴
📱 Hacking the Xbox

#reverse_engineering #reversing
#xbox_hacking

@ZwLowLevel
https://bunniefoo.com/nostarch/HackingTheXbox_Free.pdf
Please open Telegram to view this post
VIEW IN TELEGRAM
57 viewsGolden Byte, 
Low Level CO 🇨🇴
Bind Link – EDR Tampering

#edr_bypass #edr_evasion

@ZwLowLevel
https://ipurple.team/2025/12/01/bind-link-edr-tampering/
Purple Team
Bind Link – EDR Tampering
The Bind Link API enables Administrators to create transparent mappings from a virtual path to a backing path (local or remote). The Bind Link feature was introduced in Windows 11 and according to …
🗿1
51 viewsGolden Byte, 
Low Level CO 🇨🇴
🎁 Extending Kernel Race Windows Using '/dev/shm'

#linux_kernel #ring_0
#linux_exploitation
#exploitation

@ZwLowLevel
https://faith2dxy.xyz/2025-11-28/extending_race_window_fallocate/
Please open Telegram to view this post
VIEW IN TELEGRAM
faith2dxy.xyz
Extending Kernel Race Windows Using '/dev/shm'
Showcasing an alternative technique to userfaultfd for extending race windows in the Linux kernel.
49 viewsGolden Byte, 
Low Level CO 🇨🇴
😽 Sophisticated but buggy malware packer

#malware_analysis
#malware_spreading
#cyber_threat_intelligence
#cti

@ZwLowLevel
Please open Telegram to view this post
VIEW IN TELEGRAM
Withsecure
TangleCrypt: a sophisticated but buggy malware packer
WithSecure's STINGR Group is releasing a detailed technical analysis of TangleCrypt, a previously undocumented packer for Windows malware. The packer was found on two executables of the STONESTOP EDR killer used in a recent ransomware attack. The blogpost…
50 viewsGolden Byte, edited  
Low Level CO 🇨🇴
😁 Patching Pulse Oximeter Firmware

#reverse_engineering
#firmware_analysis

@ZwLowLevel
https://stefan-gloor.ch/pulseoximeter-hack
Please open Telegram to view this post
VIEW IN TELEGRAM
45 viewsGolden Byte, 
Low Level CO 🇨🇴
Gio Pika - Буйно голова (MRJay Remix)
MRJay
🤝1
43 viewsGolden Byte, 
Low Level CO 🇨🇴
Cazando los handles de sistema 🪟
Please open Telegram to view this post
VIEW IN TELEGRAM
44 viewsGolden Byte, 
Low Level CO 🇨🇴
🔥 Building a Windows Kernel-Mode Driver for Process Hiding (Rootkit Techniques)

#windows_internals #windows_kernel
#rootkit #malware_development

@ZwLowLevel
Please open Telegram to view this post
VIEW IN TELEGRAM
HackMag
Building a Windows Kernel-Mode Driver for Process Hiding (Rootkit Techniques)
Tech magazine for cybersecurity specialists
50 viewsGolden Byte, 
Low Level CO 🇨🇴
ReCopilot: A Reverse Engineering Copilot for Boosting Binary Analysis with Decompiler

#reverse_engineering #reversing #copilot

@ZwLowLevel
https://github.com/XingTuLab/recopilot
GitHub
GitHub - XingTuLab/recopilot: ReCopilot: Reverse Engineering Copilot in Binary Analysis
ReCopilot: Reverse Engineering Copilot in Binary Analysis - XingTuLab/recopilot
51 viewsGolden Byte, 
Low Level CO 🇨🇴
👻 EDR evasion primer

#edr_bypass #edr_evasion

@ZwLowLevel
Please open Telegram to view this post
VIEW IN TELEGRAM
57 viewsGolden Byte, 
Low Level CO 🇨🇴
Forwarded from Whitehat Lab
Hacking in an epistolary way: implementing kerberoast in pure VBA |
Hacking in an epistolary way: implementing kerberoast in pure VBA | AdeptsOf0xCC
Creating a macro for Excel in VBA to perform kerberoast attacks
💻 https://adepts.of0x.cc/kerberoast-vba-macro/

#windows #vba #kerberoast

✈️ Whitehat Lab 💬Chat
Please open Telegram to view this post
VIEW IN TELEGRAM
52 viewsGolden Byte, 
Low Level CO 🇨🇴
🤖 WhiteLie: A Robust System for Spoofing User Data in Android Platforms

#android #android_security
#android_internals #armv8

@ZwLowLevel
Please open Telegram to view this post
VIEW IN TELEGRAM
52 viewsGolden Byte, 
Low Level CO 🇨🇴
Y2meta.app - Daddy Yankee - Alerta Roja Ft varios artistas (Video…
<unknown>
47 viewsGolden Byte, 
Low Level CO 🇨🇴
EDR-AppLocker

Blocking EDRs with AppLocker

#applocker #edr_tampering
#edr_bypass #edr_evasion

@ZwLowLevel
https://github.com/zero2504/EDR-AppLocker
41 viewsGolden Byte, 
Low Level CO 🇨🇴
💀 Security Defeating ESP32 Security: Extracting Flash Encryption and Secure Boot Keys

#firmware_hacking #firmware_analysis
#reverse_engineering #reversing
#secure_boot

@ZwLowLevel
https://hackmag.com/security/esp32-hack
Please open Telegram to view this post
VIEW IN TELEGRAM
HackMag
Defeating ESP32 Security: Extracting Flash Encryption and Secure Boot Keys
Tech magazine for cybersecurity specialists
🔥1
49 viewsGolden Byte, edited