MikroTik router reverse engineering (SOHO, embedded/IoT devices)
Excellent writeup by @hgarrereyn and @__comedian


https://margin.re/2022/06/pulling-mikrotik-into-the-limelight/

Slides (RECon)

#iot ,
———
@islemolecule_source

MutationGate is a new approach to bypass EDR's inline hooking by utilizing hardware breakpoint to redirect the syscall.

https://github.com/senzee1984/MutationGate

#malware_dev
#edr
----
@islemolecule_source

Ghidra Binary Diffing Engine

credit: @clearseclabs


clearbluejar.github.io/posts…

———
@islemolecule_source

Exploring malicious Windows drivers (Part 1): Introduction to the kernel and drivers

https://blog.talosintelligence.com/exploring-malicious-windows-drivers-part-1-introduction-to-the-kernel-and-drivers/


#malware_dev , #windows_internals
———
@islemolecule_source

BlackCat Ransomware (ALPHV) Configuration Tool, You Just Need To Understand How This Tool Works

Note - Use RDP For Testing

Source : https://www.varonis.com/blog/blackcat-ransomware

Fuzzer Development: The Soul of a New Machine
credit : @h0mbre_


https://h0mbre.github.io/New_Fuzzer_Project/#

#fuzzer
———
@islemolecule_source

WADComs is an interactive cheat sheet ->Windows/AD

https://wadcoms.github.io

#windows #AD
----------
@islemolecule_source

Payload creation framework to around EDR bypass.

Link

#edr
--------
@islemolecule_source

Win32 programming
Link

#win_api
------------
@islemolecule_source

Anti debugging techniques
Link

#reverse
#win_api
------------
@islemolecule_source

Windows programming tutorial
Link

#win_api
-----------
@islemolecule_source

Mastering C++ Programming: Modern C++ 17 at your fingertips
Link

#win_api
-----------
@islemolecule_source

Windows via c / c++

#win_api
------------
@islemolecule_source

Windows System Programming Fundamentals
>Course Overview
>Windows Foundations
>Application Development Basics
>Objects and Handles

#win_api
-----------
@islemolecule_source

Today the United States government recommended to the courts that Conor Fitzpatrick, the previous administrator of BreachedForum, receive 15 years in prison.

PE Parser Document

Almost all topics related to PE files are covered.
References and files used to write this document are at your disposal.

#pe