C2 Development Series 4/4
credit : @preemptdev
[ 01 ] Introduction
[ 02 ] The C2 Architecture
[ 03 ] Building the Team Server
[ 04 ] Writing a C2 Implant
#C2 , #red_team ,
———
@islemolecule_source
credit : @preemptdev
[ 01 ] Introduction
[ 02 ] The C2 Architecture
[ 03 ] Building the Team Server
[ 04 ] Writing a C2 Implant
#C2 , #red_team ,
———
@islemolecule_source
❤6😱3
Reverse Engineering Dark Souls 3 Networking:
A DarkSouls fan wrote his own DS3OS server for the second and third parts. A series of articles about how he managed to reverse engineer the game’s network stack.
Link
A DarkSouls fan wrote his own DS3OS server for the second and third parts. A series of articles about how he managed to reverse engineer the game’s network stack.
Link
GitHub
GitHub - TLeonardUK/ds3os: Dark Souls - Open Server
Dark Souls - Open Server. Contribute to TLeonardUK/ds3os development by creating an account on GitHub.
🔥4❤1
New open source RAT on the scene Xeno Rat 🐭
GitHub
https://www.cyfirma.com/outofband/xeno-rat-a-new-remote-access-trojan-with-advance-capabilities/
GitHub
https://www.cyfirma.com/outofband/xeno-rat-a-new-remote-access-trojan-with-advance-capabilities/
🔥5
Bypassing Defender on modern Windows 10 systems
https://www.purpl3f0xsecur1ty.tech/2021/03/30/av_evasion.html
https://www.purpl3f0xsecur1ty.tech/2021/03/30/av_evasion.html
Purpl3 F0x Secur1ty
Bypassing Defender on modern Windows 10 systems
Intro
👍6👏1
Automated Multi UAC BYPASS for win10|win11|ws2019|ws2022
(PS1)
https://github.com/x0xr00t/Automated-MUlti-UAC-Bypass
(PS1)
https://github.com/x0xr00t/Automated-MUlti-UAC-Bypass
👍6
Forwarded from white2hack 📚
God Penetration Testing Reference Bank
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet. This is a collection of resources, noscripts and easy to follow how-to's. I have been gathering (and continuing to gather) in preparation for the OSCP as well as for general pentesting. Feel free to use however you want!
GitHub
#pentest
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet. This is a collection of resources, noscripts and easy to follow how-to's. I have been gathering (and continuing to gather) in preparation for the OSCP as well as for general pentesting. Feel free to use however you want!
GitHub
#pentest
👍4❤2👎1
Forwarded from Source Byte (Anastasia 🐞)
ETW series
[ 1 ] ETW visualization
[ 2 ] Uncovering Windows Events
[ 3 ] ETW internals for security research and forensics
[ 4 ] Exploiting a “CVE-2020-1034” Vulnerability – In 35 Easy Steps or Less!
[ 5 ] Design issues of modern EDRs: bypassing ETW-based solutions
[ 6 ] A Primer On Event Tracing For Windows (ETW)
[ 7 ] Windows 10 ETW Events references collection
[ 8 ] evading EDR book [ 1 ] , [ 2 ]
[ 9 ] Detecting In-Memory Threats with Kernel ETW Call Stacks
[ 10 ] Direct Kernel Object Manipulation (DKOM) Attacks on ETW Providers
[ 11 ] A Begginers All Inclusive Guide to ETW
[ 12 ] ETW References
[ 13 ] Give Me an E, Give Me a T, Give Me a W. What Do You Get? RPC! (pars events from the RPC ETW)
[ 14 ] Attacks on ETW Blind EDR Sensors ( black hat con )
[ 15 ] This write-up will present a case study of using ETW (Event Tracing for Windows) to analyze an active Cobalt Strike Beacon that was still active and communicating to it's C2 Server.
[ 16 ] Event Tracing for Windows (ETW): Your Friendly Neighborhood IPC Mechanism
[ 17 ] coming soon...
———
@islemolecule_source
[ 1 ] ETW visualization
[ 2 ] Uncovering Windows Events
[ 3 ] ETW internals for security research and forensics
[ 4 ] Exploiting a “CVE-2020-1034” Vulnerability – In 35 Easy Steps or Less!
[ 5 ] Design issues of modern EDRs: bypassing ETW-based solutions
[ 6 ] A Primer On Event Tracing For Windows (ETW)
[ 7 ] Windows 10 ETW Events references collection
[ 8 ] evading EDR book [ 1 ] , [ 2 ]
[ 9 ] Detecting In-Memory Threats with Kernel ETW Call Stacks
[ 10 ] Direct Kernel Object Manipulation (DKOM) Attacks on ETW Providers
[ 11 ] A Begginers All Inclusive Guide to ETW
[ 12 ] ETW References
[ 13 ] Give Me an E, Give Me a T, Give Me a W. What Do You Get? RPC! (pars events from the RPC ETW)
[ 14 ] Attacks on ETW Blind EDR Sensors ( black hat con )
[ 15 ] This write-up will present a case study of using ETW (Event Tracing for Windows) to analyze an active Cobalt Strike Beacon that was still active and communicating to it's C2 Server.
[ 16 ] Event Tracing for Windows (ETW): Your Friendly Neighborhood IPC Mechanism
[ 17 ] coming soon...
———
@islemolecule_source
👍4🔥1
Study materials for the Certified Red Team Expert (CRTE) exam, covering essential concepts in red teaming and penetration testing.
🔎GitHub
———
@islemolecule_source
🔎GitHub
———
@islemolecule_source
👍5
Course materials for Malware Analysis by RPISEC
https://github.com/RPISEC/Malware/tree/master/Lectures
https://github.com/RPISEC/Malware/tree/master/Lectures
👍2
What are the resources to learn malware analysis?
https://www.quora.com/What-are-the-resources-to-learn-malware-analysis
https://www.quora.com/What-are-the-resources-to-learn-malware-analysis
Quora
What are the resources to learn malware analysis?
1 person wants answers to this question. Be the first to answer.
👍2
Some good resources for malware analysis and reverse engineering etc..
https://github.com/rshipp/awesome-malware-analysis
https://github.com/rshipp/awesome-malware-analysis
👍3
👍4
🥰7
Work in progress experiments with reverse shells, AV bypass and extraction of secrets from memory in C
https://github.com/0x4141414141/Malware-Devlopment
https://github.com/0x4141414141/Malware-Devlopment
👍6