#reversing
L’art de l’évasion: How Shlayer hides its configuration inside Apple proprietary DMG files
https://objective-see.org/blog/blog_0x70.html

#Research
"A Survey of the Recent Trends in Deep Learning Based Malware Detection", 2022.

#𝑆𝑀𝑇𝑃𝑆 🟢🔥

HOST : smtp.eu.mailgun.org
PORT : 587
USER : postmaster@account.billada.com
PASS : f792a046ee0b4ddd9312a7d2bbb8cef7-8845d1b1-dd279cee

HOST : premium157.web-hosting.com
PORT : 587
USER : noreply@bridgepro.ca
PASSW : qComPass@Romi7664
SENDER : unknown@unknown.com

HOST : mail.msofficeskill.com
PORT : 587
USER : info@msofficeskill.com
PASSW : Prateek@1974
SENDER : info@msofficeskill.com

HOST : smtp.hostinger.com
PORT : 587
USER : support@ironpatches.net
PASSW : Undisputed$1
SENDER : support@ironpatches.net

HOST : smtp.office365.com
PORT : 587
USER : mbl@myanmar-brewery.com
PASS : P@ssw0rd2022@)@@

HOST : srvc204.trwww.com
PORT : 587
USER : send@yazicitoner.com.tr
PASSW : Send0034!
SENDER : send@yazicitoner.com.tr

HOST : smtp.hostinger.com
PORT : 587
USER : support@ironpatches.net
PASSW : Undisputed$1
SENDER : support@ironpatches.net

Россияне в третьем квартале текущего года вывели в другие страны рекордные 1,47 трлн рублей. Это почти в три раза больше, чем в первом и втором кварталах, и в 26 раз больше, чем в третьем квартале 2021 года.

Translation: ru-en
In the third quarter of this year, the Russians withdrew a record 1.47 trillion rubles to other countries. This is almost three times more than in the first and second quarters, and 26 times more than in the third quarter of 2021.

must watch once video by
@Deadlymalwarexp

💻@Deadlymalwarexp💻

#Cloud_Security
1. Parsing and manipulating JSON in Powershell
https://isc.sans.edu/diary/29380
2. Passwordless Persistence and Privilege Escalation in Azure
https://posts.specterops.io/passwordless-persistence-and-privilege-escalation-in-azure-98a01310be3f

#exploit
1. Syncovery For Linux Web-GUI - Authenticated RCE
https://packetstormsecurity.com/files/170245/Syncovery-For-Linux-Web-GUI-Authenticated-Remote-Command-Execution.html

2. CVE-2022-47949:
ENLBufferPwn: Critical RCE flaw affects multiple Nintendo games
https://github.com/PabloMK7/ENLBufferPwn

#Research
#Sec_code_review
"Do Users Write More Insecure Code with AI Assistants?", 2022.

#Malware_analysis
1. Malicious Macros Adapt to Use Microsoft Publisher to Push Ekipa RAT
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/malicious-macros-adapt-to-use-microsoft-publisher-to-push-ekipa-rat
2. WinAPI, and "Cheap" Malware Analysis Using AI
Part 1: https://medium.com/@perliftach/winapi-and-cheap-malware-analysis-using-ai-part-1-69e4a8fc8328
Part 2: https://medium.com/@perliftach/winapi-and-cheap-malware-analysis-using-ai-part-2-485c9104f5b6

#Offensive_security
1. Spice up your persistence: loading PHP extensions from memory
https://adepts.of0x.cc/dlopen-from-memory-php
2. Unholy Unhooking
byoDLL: https://steve-s.gitbook.io/0xtriboulet/unholy-unhooking/unholy-unhooking-byodll
FrByoDLL: https://steve-s.gitbook.io/0xtriboulet/unholy-unhooking/unholy-unhooking-frbyodll

#Tech_book
#Hardware_Security
"A Noob's Guide To ARM Exploitation", 2022.
https://ad2001.gitbook.io/a-noobs-guide-to-arm-exploitation

#Malware_analysis
1. GuLoader Malware Uses Advanced Anti-Analysis Techniques to Evade Detection
https://gbhackers.com/guloader-malware-advanced-anti-analysis
2. CatB Ransomware
https://minerva-labs.com/blog/new-catb-ransomware-employs-2-year-old-dll-hijacking-technique-to-evade-detection

#Threat_Research
APT Hackers Turn to Malicious Excel Add-ins as Initial Intrusion Vector
https://thehackernews.com/2022/12/apt-hackers-turn-to-malicious-excel-add.html

#reversing
1. Reverse Engineering Rustlang Binaries - A Series
https://brightprogrammer.netlify.app/post/reverse-engineering-rustlang-binaries-0x1-empty-program
2. Huawei's Security Hypervisor
https://blog.impalabs.com/2212_huawei-security-hypervisor.html

#Offensive_security
1. Custom Implicit & Explicit Conversions in C#
https://offensivedefence.co.uk/posts/implicit-explicit-conversions
2. .NET Process injection in a new process with QueueUserAPC using D/invoke
https://gist.github.com/tothi/9cdd2be3b49cb42723726fd75df96471
3. Deceiving Defender: The Big Stack Bypass
https://steve-s.gitbook.io/0xtriboulet/deceiving-defender/deceiving-defender-the-big-stack-bypass

#hardening
Windows 10 Hardening (v.0.9.0) settings and configurations
https://github.com/0x6d69636b/windows_hardening