Helper plugin for analyzing UEFI firmware. Contribute to zznop/bn-uefi-helper development by creating an account on GitHub.

Share your videos with friends, family, and the world

Using SourcePoint’s JTAG debugger to investigate the implementation of Intel CET Shadow Stacks in kernel-mode on Windows

As part of the second edition of Windows Kernel Programming, I’m working on chapter 13 to describe the basics of the Windows Filtering Platform (WFP). The chapter will focus mostly on kernel-…

Malware analysis courses: https://malwareanalysis-for-hedgehogs.learnworlds.com/
Use this coupon for -30% on the courses (until 1. Jan. 2026): IAMSADBLACKFRIDAYISOVER

Discord invite: https://discord.gg/BSaCtKg5

Sample: https://malshare.com/sample.php?…

hyper-v internals

hyper-v internals

Linux Kernel module-less implant (backdoor). Contribute to milabs/kopycat development by creating an account on GitHub.

Multi-tool reverse engineering collaboration solution. - Martyx00/CollaRE

Windows shellcode development in Rust. Contribute to b1tg/rust-windows-shellcode development by creating an account on GitHub.

View our malware analysis training: https://AGDCservices.com/training/

Follow me on Twitter for RE tips and resources: https://twitter.com/AGDCservices

View our malware analysis products to aid in your RE efforts (Ghidra / python noscripts, tools, and individual…

Our researcher reverse engineered Apple iMessage to explore extending it the secure messaging app to other systems. See how he fared.

Cobalt Strike 4.12 introduces a refreshed GUI, a REST API, User Defined Command and Control (UDC2), new process injection options, and more.

ReCopilot: Reverse Engineering Copilot in Binary Analysis - XingTuLab/recopilot

Binary diffing is a great way to visualize and spot differences in multiple samples. As a malware researcher, this is useful for…

About the Project The more Cryptominer malware I look at (or anything targeting Linux), the more trends I’ve identified that are common regardless of the underlying intent. Everyone loves to use UPX.
And why wouldn’t they? It’s a free Open Source packer that…

Creating a macro for Excel in VBA to perform kerberoast attacks

Unveil the

IDA Pro Debugger: Leveraging the Take Memory Snapshot Feature by Hexorcist

In this video, we are going to see that we can get decrypted code very fast in our IDB without bothering to write IDA Python noscripts. In those examples, I am using simple XOR, but…