HTTP Botnet designed to replicate a full weaponized commercial botnet.
Link

#malware_dev
------------------
@islemolecule_source

Pure HTTP and DNS Botnet written in Golang

Link

#malware_dev
------------------
@islemolecule_source

persistent reverse shell for windows
Link

#windows
#malware_dev
----------------------
@islemolecule_source

Malware and cryptography 24: encrypt/decrypt file via Madryga. Simple C/C++ example.

Link

#malware_dev
----------------------
@islemolecule_source

FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

Link

#reverse
----------------------
@islemolecule_source

Reverse Engineering For Everyone!

Link

#reverse
----------------------
@islemolecule_source

List of awesome reverse engineering resources
Link

#reverse
----------------------
@islemolecule_source

Pe file format explanation
Link


#Pe
----------------------
@islemolecule_source

This repository helps you to acquire knowledge of software engineering by self-reading and using free resources if you did not go to university.

language : persian

https://github.com/kalagar/computer-science-university-alternative?tab=readme-ov-file

a great series for learning Linux kernel exploitation
CVE-2017-11176 (UaF in mq_notify function)
Credit: @LexfoSecurite

[ 1 ] blog.lexfo.fr/cve-2017-11176…
[ 2 ] blog.lexfo.fr/cve-2017-11176…
[ 3 ] blog.lexfo.fr/cve-2017-11176…
[ 4 ] blog.lexfo.fr/cve-2017-11176…



#CVE , #analysis , #old_but_gold
——-
@islemolecule_source

Loading DLLs without LoadLibraryA. Instead we'll leverage the VEH (Vectored Exception Handler) to modify the context, especially RIP and RCX to hold the LoadLibraryA address and it's argument.

Link

#malware_dev
———
@islemolecule_source

LOLBAS
Living Off The Land techniques.
GitHub
Doc

#windows
#redteam
#lolbin
———
@islemolecule_source

LoLBins in attacks
Link

#windows
#redteam
#lolbin
———
@islemolecule_source

LOLBin: fhmanagew.exe
Link


#windows
#redteam
#lolbin
———
@islemolecule_source

LOLBin for Downloading Arbitrary Files

C:\Windows\System32\IME\SHARED\IMEWDBLD.exe <URL>

Find the downloaded file in

%LocalAppData%\Microsoft\Windows\INetCache\<8_RANDOM_ALNUM_CHARS>/<FILENAME>[1].<EXTENSION>

#windows
#redteam
#lolbin
———
@islemolecule_source

"GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems."

Link

#linux
#redteam
#lolbin
———
@islemolecule_source

What the Vuln: EDR Bypass with LoLBins
Link

#windows
#redteam
#lolbin
———
@islemolecule_source

"PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for red and blue teamers", 2023.

#powershell
———
@islemolecule_source

Simple password/cookies/history/bookmarks stealer/dumper for chrome all version
Link

#malware_dev
———
@islemolecule_source

Download Reverse engineering, windows programming, internals,etc..
Link

#windows #reverse #programming #internals
———
@islemolecule_source