NEW BOT Телеграм, страница

What the Vuln: EDR Bypass with LoLBins
Link

#windows
#redteam
#lolbin
———
@islemolecule_source

👍3🔥1

808 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, edited 22:35

"PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for red and blue teamers", 2023.

#powershell
———
@islemolecule_source

👏4

964 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, edited 03:18

Source Byte

Simple password/cookies/history/bookmarks stealer/dumper for chrome all version
Link

#malware_dev
———
@islemolecule_source

890 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 09:10

Source Byte

Download Reverse engineering, windows programming, internals,etc..
Link

#windows #reverse #programming #internals
———
@islemolecule_source

835 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 13:15

Source Byte

Manual Unpacking DotFix NiceProtect.rar

15.1 MB

#packer
#reverse
———
@islemolecule_source

808 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, edited 15:29

Source Byte

Loading DLLs without LoadLibraryA

meanwhile him🫤

🤓3🔥1

797 viewsAnastasia 🐞, 22:04

Source Byte

allows any user to crash the Windows Event Log service of any other Windows 10/Windows Server 2022 machine on the same domain
Link

#windows
#malware_dev
———
@islemolecule_source

724 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 05:59

Source Byte

Secure Programming Cookbook for C and C++

this book covers unix base OS and windows 👍🏻

826 viewsAnastasia 🐞, edited 08:40

Source Byte

Secure_Programming_Cookbook_for_C_and_C++_Recipes_for_Cryptography.pdf

4 MB

783 viewsAnastasia 🐞, 08:40

Source Byte

ec council - secure programming with c++

Chapter 1: Introduction to C++ Programming
Chapter 2: Battling Integer Vulnerabilities in C++
Chapter 3: Memory Management in C++
Chapter 4: Pointer Subterfuge and Object Misuse in C++
Chapter 5: Code Injection Attacks and Run-time Countermeasures
Chapter 6: Eliminate Common Issues with Multithreaded Programming: Concurrency and Parallelism
Chapter 7: Exceptions and Error Handling in C++
Chapter 8: Industry Resources and Best Practices for C++ Development

LINK
file password : https://news.1rj.ru/str/islemolecule_source

course website link

❤5👍1

834 viewsAnastasia 🐞, edited 08:43

Source Byte

Pwn college
Link

#reverse
#pwn
———
@islemolecule_source

👍3

729 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 10:30

Source Byte

post get updated :

+ Detecting In-Memory Threats with Kernel ETW Call Stacks
+ Direct Kernel Object Manipulation (DKOM) Attacks on ETW Providers
+ A Begginers All Inclusive Guide to ETW
+ ETW References
+ Give Me an E, Give Me a T, Give Me a W. What Do You Get? RPC! (pars events from the RPC ETW)
+ Attacks on ETW Blind EDR Sensors ( black hat con )

741 viewsAnastasia 🐞, edited 11:42

Source Byte

Windows - Data Protection API (DPAPI)

https://tierzerosecurity.co.nz/2024/01/22/data-protection-windows-api.html

#windows , #internals
———
@islemolecule_source

735 viewsAnastasia 🐞, edited 11:51

Source Byte

many ask what is the best assembly course out there ?
this a 4 hours " Game Development in assembly " which i recommand every time

https://www.youtube.com/watch?v=p60L-TOecik

have a nice time with that 👍🏻

it's a joke plz don't take it serious.

🤣3👍2

854 viewsAnastasia 🐞, 15:50

Source Byte

A site that allows you to ask hacker questions from chatgpt

https://www.hackergpt.co/
github
———
@islemolecule_source

👍2

868 viewsمحمد عرفان حسین بیکی, edited 19:54

Source Byte

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password

https://github.com/ihebski/DefaultCreds-cheat-sheet

———
@islemolecule_source

👍2

786 viewsمحمد عرفان حسین بیکی, edited 19:58

Source Byte

Source Byte pinned «A site that allows you to ask hacker questions from chatgpt https://www.hackergpt.co/ github ——— @islemolecule_source»

19:59

Source Byte

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
https://github.com/semgrep/semgrep
———
@islemolecule_source

👎3👍2

742 viewsمحمد عرفان حسین بیکی, edited 20:36

Source Byte

Bypass firewall through process injection

https://github.com/redeflesq/firewall-bypass

#malware_dev
———
@islemolecule_source

👍2

754 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 06:20

Source Byte

What do you know about PE Relocations?!
Link

#malware_analysis
———
@islemolecule_source

👍2

750 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 07:33

Source Byte

Forwarded from BugCod3

👻

Ghost

👻

👻 RAT (Remote Access Trojan) - Silent Botnet - Full Remote Command-Line Access - Download & Execute Programs - Spread Virus' & Malware

💬

ghost is a light RAT that gives the server/attacker full remote access to the user's command-line interpreter (cmd.exe). They are allowed to execute commands silently without the client/zombie noticing. The server/attacker is also given the ability to download and execute files on the client/zombie's computer. This is also a silent and hidden process. Like most Remote Access Trojans, this download and execution ability helps distribute viruses and other pieces of malware.

👁‍🗨

This malware is distributed simply by running zombie.exe. This file name can be changed to whatever. There is no restriction. When run, it searches for the first two arguments (IP & Port). If neither is provided, the program doesn't run. With that being said, make sure you provide the server's IP and Port in the command-line arguments. Example:

zombie.exe 127.0.0.1 27015

📊 Features:
⚪️ Remote command execution
⚪️ Silent background process
⚪️ Download and run file (Hidden)
⚪️ Safe Mode startup
⚪️ Will automatically connect to the server
⚪️ Data sent and received is encrypted (substitution cipher)
⚪️ Files are hidden
⚪️ Installed Antivirus shown to server
⚪️ Easily spread malware through download feature
⚪️ Startup info doesn't show in msconfig or other startup checking programs like CCleaner
⚪️ Disable Task Manager

😸

Github

⬇️

Download

🔒

BugCod3

#Rat #Malware #Remote #Access

➖