NEW BOT Телеграм, страница

Forwarded from R

Right-to-Left Override (RLO) Extension Spoofing

     
Rename-Item -Path malware.exe -NewName ("Ann" + ( [char]0x202E) + "gepj.exe")

In this example malware.exe becomes Annexe.jpeg

https://attack.mitre.org/techniques/T1036/002/

👏5🔥1

1.53K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, 06:27

Source Byte

Fuzz_in_2020s.pdf

2.2 MB

Fuzzing in the 2020s:
Novel Approaches and Solutions
Thèse présentée et soutenue à Biot, le 8/12/2023, par
Andrea Fioraldi
#Fuzzing

👍3🥰1

1.43K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, 06:30

Source Byte

Right-to-Left Override (RLO) Extension Spoofing Rename-Item -Path malware.exe -NewName ("Ann" + ( [char]0x202E) + "gepj.exe") In this example malware.exe becomes Annexe.jpeg https://attack.mitre.org/techniques/T1036/002/

🔥5

1.38K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, edited 07:31

Source Byte

Palo Alto GlobalProtect EoP
(CVE-2024-2432)

https://github.com/Hagrid29/CVE-2024-2432-PaloAlto-GlobalProtect-EoP

👍2🔥1

4.08K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, 09:49

Source Byte

Forwarded from 1N73LL1G3NC3

0:43

This media is not supported in your browser

VIEW IN TELEGRAM

💋

GamingServiceEoP by [ Filip Dragović @filip_dragovic ]

Exploit for arbitrary folder move in GamingService component of Xbox. GamingService is not default service. If service is installed on system it allows low privilege users to escalate to system.

Please open Telegram to view this post

VIEW IN TELEGRAM

❤‍🔥4👍2🔥1

1.39K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, 12:54

Source Byte

Scorpio_Advanced_Windows_Kernel_Programming_w_Pavel_Yosifovich_2023.rar

1 GB

Scorpio_Advanced_Windows_Kernel_Programming_w_Pavel_Yosifovich_2023.rar

1 GB

Scorpio_Advanced_Windows_Kernel_Programming_w_Pavel_Yosifovich_2023.rar

1 GB

Scorpio_Advanced_Windows_Kernel_Programming_w_Pavel_Yosifovich_2023.rar

543.7 MB

Scorpio-Advanced.Windows.Kernel.Programming.w.Pavel.Yosifovich.(2023)

thanks 4e6571 for sharing

https://scorpiosoftware.net/2023/02/20/windows-kernel-programming-class-recordings/

❤11👍1🔥1🍓1

1.99K viewsAnastasia 🐞, edited 13:48

Source Byte

ICS410 ICS/SCADA Security Essentials 2024
https://learnflakes.net/?p=rss&action=download&tid=55146&pk=666d37941e65bc27c1a86ebf627979332c5ef3ec

👏4🔥2

1.84K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, 15:35

Source Byte

Zero EAT touch way to retrieve function addresses
https://github.com/MzHmO/SymProcAddress

👍3

1.58K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, 07:37

Source Byte

❤4🤡2

1.58K viewsAnastasia 🐞, 18:04

Source Byte

Malware Dev Reading List
https://gist.github.com/0prrr/c0954a638c55ab4b39e8b02ef312e806

#malware_dev

❤5

1.5K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, 02:40

Source Byte

Blinding EDR On Windows
https://synzack.github.io/Blinding-EDR-On-Windows/

#edr

🔥4

1.56K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, 02:42

Source Byte

List of callbacks and codes that we can use them to execute shellcode
(Alternative Shellcode Execution Via Callbacks)
https://github.com/aahmad097/AlternativeShellcodeExec

#malware_dev

👍2

1.5K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, 02:45

Source Byte

Program to Inject a DLL into a process from memory

https://github.com/BlackHat-Ashura/Reflective_DLL_Injection

GitHub

GitHub - BlackHat-Ashura/Reflective_DLL_Injection: Program to Inject a DLL into a process from memory.

Program to Inject a DLL into a process from memory. - BlackHat-Ashura/Reflective_DLL_Injection

❤2

1.45K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1👾, edited 03:40

Source Byte

Forwarded from 4e6571

Scorpio-Windows.Internals.(2020)