NEW BOT Телеграм, страница

Source Byte

Excellent series for learning the basic of ELF file format internals
Credits IntezerLabs

Part 1:
intezer.com/blog/research/ex…

Part 2:
intezer.com/blog/malware-ana…

Part 3:
intezer.com/blog/malware-ana…

Part 4:
intezer.com/blog/malware-ana…

344 viewsAnastasia 🐞, edited 13:43

Source Byte

Beginner introduction to Linux processes and how they are started by the execve() syscall
iq.thc.org/how-does-linux-st…

341 viewsAnastasia 🐞, 13:45

Source Byte

Interesting writeup by raelizecom on how to use power and electromagnetic analysis to break hardware cryptography using

Power analysis:
raelize.com/blog/espressif-s…

Electromagnetic analysis:
raelize.com/blog/espressif-s…

382 viewsAnastasia 🐞, edited 13:45

Source Byte

Interesting writeup by raelizecom on how to use power and electromagnetic analysis to break hardware cryptography using Power analysis: raelize.com/blog/espressif-s… Electromagnetic analysis: raelize.com/blog/espressif-s…

This media is not supported in your browser

VIEW IN TELEGRAM

418 viewsAnastasia 🐞, 13:46

Source Byte

Mobile Malware Analysis Part 3 – Pegasus
8ksec.io/mobile-malware-anal…

426 viewsAnastasia 🐞, 13:48

Source Byte

ProcessStomping

A variation of ProcessOverwriting to execute shellcode on an executable's section.

https://github.com/naksyn/ProcessStomping

#cybersecurity #infosec #pentesting #redteam

GitHub

GitHub - naksyn/ProcessStomping: A variation of ProcessOverwriting to execute shellcode on an executable's section

A variation of ProcessOverwriting to execute shellcode on an executable's section - naksyn/ProcessStomping

399 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 16:17

Source Byte

#tools
#Threat_Research
Awesome GPTs (Agents) for Cybersecurity
https://github.com/fr0gger/Awesome-GPT-Agents

GitHub

GitHub - fr0gger/Awesome-GPT-Agents: A curated list of GPT agents for cybersecurity

A curated list of GPT agents for cybersecurity. Contribute to fr0gger/Awesome-GPT-Agents development by creating an account on GitHub.

373 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 16:24

Source Byte

https://pan-unit42.github.io/playbook_viewer/

346 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 16:30

Source Byte

Forwarded from vx-underground

Here is a very poorly written way to do 'whoami' using CreateNamedPipe and Advapi32!NpGetUserName.

This undocumented function will do the generic LookupAccountSidW via GetUserNameExW, but it can act as a proxy function, or something.

https://pastebin.com/raw/ZsReS7k4

293 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 03:12

Source Byte

Forwarded from vx-underground

Tired of seeing nerds arguing about C2's? Next time use some C4. EDR's struggle against C4

262 viewsAnastasia 🐞, 07:53

Source Byte

https://youtu.be/cxu3QwUK_lk?si=xNGUUPZx8I_s0l9D

YouTube

How config Ja4 for ZeeK and how use that (JA4+ Network Fingerprinting)

JA4+ is a suite of network fingerprinting methods that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for…

334 views‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌$ᴘ3ᴅʏʟ1, 21:50

Source Byte