NEW BOT Телеграм, страница

Source Byte

there is red-team workshop on 14 pm ( tehran time ) ( language -> persian )

mr.hashemi is going to talk about APT-38

it's going to be fun and a long workshop as he talking about all TTPs
so
فلاسک چای و خوراکی فراموش نشه :)

~~access work shop here ( no registration needed ) :~~
~~https://www.skyroom.online/ch/huntlearn/redteam~~

ended , will update the link with recorded version

.

👾9🔥6👍3❤‍🔥1

2.3K viewsAnastasia 🐞, edited 08:41

Source Byte

there is red-team workshop on 14 pm ( tehran time ) ( language -> persian ) mr.hashemi is going to talk about APT-38 it's going to be fun and a long workshop as he talking about all TTPs so فلاسک چای و خوراکی فراموش نشه :) access work shop here ( no…

👀 better not miss this one

🤯2👍1

2.01K viewsAnastasia 🐞, edited 08:43

Source Byte

Forwarded from Infosec Fortress

1:11

This media is not supported in your browser

VIEW IN TELEGRAM

Hello again! I’m excited to announce a new feature in the plugin: it now supports regex-based searches. This means you can find instructions not just by their mnemonics, but also by using powerful regular expressions for more precise and flexible matching.

The Repository link

#projects
———
🆔 @Infosec_Fortress

❤4👾2👍1

1.94K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, 21:52

Source Byte

💀

😁10💩5👍1🤮1🤡1

2.15K viewsAnastasia 🐞, 15:41

Source Byte

Malware dev Reading List
https://gist.github.com/0prrr/c0954a638c55ab4b39e8b02ef312e806

#best

#maldev #malware_dev

Gist

Malware Dev Reading List

Malware Dev Reading List. GitHub Gist: instantly share code, notes, and snippets.

🔥4👍1

2.46K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, edited 16:09

Source Byte

https://www.youtube.com/watch?v=jRDrrXj3D4w

👍3

2.04K viewsAnastasia 🐞, 04:41

Source Byte

Kernel mode WinDbg extension and PoCs for testing how token privileges work.

https://github.com/daem0nc0re/PrivFu/tree/main

GitHub

GitHub - daem0nc0re/PrivFu: Kernel mode WinDbg extension and PoCs for token privilege investigation.

Kernel mode WinDbg extension and PoCs for token privilege investigation. - daem0nc0re/PrivFu

👍5👎2🥱1😐1

3.78K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, 10:03

Source Byte

https://blog.quarkslab.com/dji-the-art-of-obfuscation.html

Quarkslab

DJI - The ART of obfuscation - Quarkslab's blog

Study of an Android runtime (ART) hijacking mechanism for bytecode injection through a step-by-step analysis of the packer used to protect the DJI Pilot Android application.

👍5😁1

2.32K viewst a h a, 14:36

Source Byte

A collection of tools which integrate with Cobalt Strike
(and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

https://github.com/outflanknl/C2-Tool-Collection

👍2❤1

2.26K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, edited 00:52

Source Byte

Directory Services Internals (DSInternals)
Ad toolkit ,PowerShell Module and Framework

https://github.com/MichaelGrafnetter/DSInternals/tree/master

#ad

👍3

2.28K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, edited 13:21

Source Byte

Credential_Dumping_NTDS_dit_1628039354.pdf

1.2 MB

Credential Dumping: NTDS.dit
In this article, you will learn how passwords are stored in NTDS.dit file on Windows Server and then we will learn how to dump these credentials hashes from NTDS.dit file.
Table of Content
▪ Introduction to NTDS ▪ NTDSPartitions
▪ DatabaseStorageTable
▪ ExtractingCredentialbyExploitNTDS.ditinMultipleMethods
▪ FGDump
▪ NTDSUtil
▪ DSInternals
▪ NTDSDumpEx ▪ Metasploit
▪ NTDS_location ▪ NTDS_grabber ▪ secretsdump
▪ CrackMapExec
▪ CrackingHashes

#ad #active_directory

👍8

2.42K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, edited 13:29

Source Byte

Windows API Function Cheatsheets

https://github.com/7etsuo/windows-api-function-cheatsheets

index :

File Operations
Process Management
Memory Management
Thread Management
Dynamic-Link Library (DLL) Management
Synchronization
Interprocess Communication
Windows Hooks
Cryptography
Debugging
Winsock
Registry Operations
Error Handling
Resource Management
Unicode String Functions
String Length
String Copy
String Concatenation
String Comparison
String Search
Character Classification and Conversion
Win32 Structs Cheat Sheet
Common Structs
Win32 Sockets Structs Cheat Sheet (winsock.h)
Win32 Sockets Structs Cheat Sheet (winsock2.h)
Win32 Sockets Structs Cheat Sheet (ws2def.h)
Code Injection Techniques
1. DLL Injection
2. PE Injection
3. Reflective Injection
4. APC Injection
5. Process Hollowing (Process Replacement)
6. AtomBombing
7. Process Doppelgänging
8. Process Herpaderping
9. Hooking Injection
10. Extra Windows Memory Injection
11. Propagate Injection
12. Heap Spray
13. Thread Execution Hijacking
14. Module Stomping
15. IAT Hooking
16. Inline Hooking
17. Debugger Injection
18. COM Hijacking
19. Phantom DLL Hollowing
20. PROPagate
21. Early Bird Injection
22. Shim-based Injection
23. Mapping Injection
24. KnownDlls Cache Poisoning
Process Enumeration

🔥4👍3👾2😢1

2.26K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, 22:24

Source Byte

BounceBack
redirector for your red team operation security

https://github.com/D00Movenok/BounceBack

#c2 #infrastructure #redteam #redirector

❤3👎1

2.16K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, edited 14:51

Source Byte

Forwarded from sanad

Ringzer0 RET2 Browser Exploitation.rar

11 MB

👍6👎5

2.4K viewsAnastasia 🐞, 17:16

Source Byte

https://ringzer0.training/advanced-browser-exploitation/

( just slides )👀

👍3

2.32K viewsAnastasia 🐞, edited 17:16

Source Byte

sgn

SGN is a polymorphic binary encoder for offensive security purposes such as generating statically undetecable binary payloads. It uses a additive feedback loop to encode given binary instructions similar to LSFR. This project is the reimplementation of the original Shikata ga nai in golang with many improvements.

https://github.com/EgeBalci/sgn

#shellcode

👍4

2.05K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, edited 02:24

Source Byte

Fun with Ntdll address

👾3👍2🏆1

1.93K views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌P҉d҉y҉👾, 11:12

Source Byte

Forwarded from KS note (Kian)