Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation - ricardojoserf/SAMDump

Red teaming on Windows systems is often associated with Active Directory attacks, credential abuse, lateral movement, and post-exploitation…

Commercial surveillance vendor Intellexa continues to thrive and exploit mobile zero-day vulnerabilities.

Early microprocessors were very slow when operating with floating-point numbers. But in 1980, Intel introduced the 8087 floating-point copro...

Welcome to this new Medium post, Today, we’re diving deep into Asynchronous Procedure Call (APC) process injection, specifically leveraging…

Cisco Talos has uncovered a new DeadLock ransomware campaign using a previously unknown BYOVD loader to exploit a Baidu Antivirus driver vulnerability, letting threat actors disable EDR defenses and escalate attacks.

01flip is a new ransomware family fully written in Rust. Activity linked to 01flip points to alleged dark web data leaks.

collection of blogs about malware development and analysis - t1Sh1n4/mlwr_blogs

System Call Hook for ARM64. Contribute to retrage/svc-hook development by creating an account on GitHub.

Highlights: Introduction Throughout 2025, we conducted and published several reports related to our research on the Silver Fox APT. In some of them (for example, here), the threat actor delivered the well-known ValleyRAT backdoor, also referred to as Winos or Winos4.0…

Behind the Binary by Google Cloud Security · Episode

proxy kit for Linux/Windows/MacOS. Contribute to yuhaiin/yuhaiin development by creating an account on GitHub.

Tech magazine for cybersecurity specialists

Tool for creating a hidden administrator account through SAM registry manipulation and identity information cloning. - Caidoam/Windows-Shadow-User-SAM-Manipulator