Reverse Engineering – Telegram
Reverse Engineering
@reverseengineeringx
4.75K subscribers
106 photos
1 video
18 files
458 links
Everything is open-source.

The official community group: @reverseengineeringz
Download Telegram
About
Blog
Apps
Platform
Join
Reverse Engineering
4.75K subscribers
Reverse Engineering
Noriben - Portable, Simple, Malware Analysis Sandbox
https://github.com/Rurik/Noriben
GitHub
GitHub - Rurik/Noriben: Noriben - Portable, Simple, Malware Analysis Sandbox
Noriben - Portable, Simple, Malware Analysis Sandbox - Rurik/Noriben
820 views
Reverse Engineering
https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/threat-actors-use-encrypted-office-binary-format-evade-detection/
839 views
Reverse Engineering
https://github.com/fdiskyou/injectAllTheThings

https://securityxploded.com/remotedll.php
872 views
Reverse Engineering
https://www.fortinet.com/blog/threat-research.html
812 views
Reverse Engineering
https://stackoverflow.com/questions/3404372/stdcall-and-cdecl
Stack Overflow
stdcall and cdecl
There are (among others) two types of calling conventions - stdcall and cdecl. I have few questions on them:
When a cdecl function is called, how does a caller
know if it should free up the stack ?...
795 views
Reverse Engineering
https://cysinfo.com/category/articles/
Cysinfo
Articles Archives - Cysinfo
Write ups from our Team Members
795 views
Reverse Engineering
https://www.fireeye.com/content/dam/fireeye-www/services/pdfs/mandiant-apt1-report.pdf
792 views
Reverse Engineering
https://www.trendmicro.it/media/wp/the-heartbeat-apt-campaign-whitepaper-en.pdf
Trend Micro
Numero uno per Cloud Security ed Endpoint Cybersecurity | Trend Micro
Trend Micro è leader mondiale di soluzioni enterprise di sicurezza in cloud, XDR e piattaforme di cybersecurity per aziende, datacenter, ambienti cloud, reti ed endpoint.
838 views
Reverse Engineering
https://www.symantec.com/content/dam/symantec/docs/security-center/white-papers/increased-use-of-powershell-in-attacks-16-en.pdf
883 views
Reverse Engineering
https://medium.com/tenable-techblog/comodo-from-sandbox-to-system-cve-2019-3969-b6a34cc85e67
Medium
COModo: From Sandbox to SYSTEM (CVE-2019–3969)
Antivirus (AV) is a great target for vulnerability hunting: Large attack surface, complex parsing, and various components executing with…
821 views
Reverse Engineering
https://www.fireeye.com/blog/threat-research/2012/08/hikit-rootkit-advanced-persistent-attack-techniques-part-1.html

https://www.fireeye.com/blog/threat-research/2012/08/hikit-rootkit-advanced-persistent-attack-techniques-part-2.html
806 views
Reverse Engineering
https://unit42.paloaltonetworks.com/t9000-advanced-modular-backdoor-uses-complex-anti-analysis-techniques/
Unit 42
T9000: Advanced Modular Backdoor Uses Complex Anti-Analysis Techniques
Unit 42 found a backdoor, T9000, that allows the attacker to capture encrypted data, take screenshots of specific applications, and target Skype users.
821 views
Reverse Engineering
https://www.welivesecurity.com/wp-content/uploads/2016/05/Operation-Groundbait.pdf
781 views
Reverse Engineering
https://docs.microsoft.com/en-us/windows/win32/com/the-component-object-model
Docs
The Component Object Model - Win32 apps
784 views
Reverse Engineering
https://docs.microsoft.com/en-us/windows/win32/dlls/dynamic-link-library-search-order
Docs
Dynamic-link library search order - Win32 apps
You can control the specific location from which any given DLL is loaded by specifying a full path. If you don't use that method, then the system searches for the DLL at load time as described in this topic.
790 views
Reverse Engineering
https://docs.microsoft.com/en-us/windows/win32/cimwin32prov/win32-service
Docs
Win32_Service class - Win32 apps
Represents a service on a computer system running Windows.
810 views
Reverse Engineering
https://cysinfo.com/blackout-memory-analysis-of-blackenergy-big-dropper/
Cysinfo
Blackout - Memory Analysis of BlackEnergy Big dropper - Cysinfo
In late December a cyber attack caused power outage for few hours in the Ivano-Frankivsk region in Ukraine as mentioned here. Threat researchers from ESET linked this attack to a malware called “BlackEnergy” which attacked electricity distribution companies…
828 views
Reverse Engineering
http://www.alex-ionescu.com/
820 views
Reverse Engineering
https://github.com/stephenfewer/ReflectiveDLLInjection
GitHub
GitHub - stephenfewer/ReflectiveDLLInjection: Reflective DLL injection is a library injection technique in which the concept of…
Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. - stephenfe...
842 views
Reverse Engineering
http://aluigi.altervista.org/mytoolz.htm
aluigi.altervista.org
Luigi Auriemma
861 views
Reverse Engineering
Security is notoriously disunited. Every year multiple tools and projects are released and never maintained. TitanMist is its inverse opposite. Built on top of TitanEngine, it provides automation and manages all known and good PEID signatures, unpacking noscripts and other tools in one unified tool.

https://www.reversinglabs.com/open-source/titanmist
908 views