🔥🔥🔥Indirect syscalls PoCs:

💥HellsHall(combination of HellsGate and indirect syscalls) - Another Way To Fetch Clean Syscalls
🔖Github repo

💥C_SYSCALLS is a single stub direct and indirect syscalling with runtime SSN resolving for windows.

💥Hiding Your Syscalls - bypassing detections that I wrote myself. To the best of my knowledge EDR vendors aren’t really alerting on direct syscalls yet.
🔖Source code

💥FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++! Doesn't it bother you to have to define every syscall stub or function within a module? Or having to depend on the Windows version for the syscalls? Well, forget about all that. FreshyCalls makes use of some features implemented from C++11 such as the variadic templates along with some custom mini-shellcode to avoid this.

💥syscalls-asm

💥Charon's Ferry(adapted from HellsGate)- An indirect syscaller

#Offensive_security
1. Offensive Software Exploitation (OSE) Course
https://github.com/ashemery/exploitation-course
2. Persistence and LOLBins
https://windowsir.blogspot.com/2022/12/persistence-and-lolbins.html

#Threat_Research
1. Compromised PyTorch-nightly dependency chain between December 25th and December 30th, 2022
https://pytorch.org/blog/compromised-nightly-dependency
2. Google Home Vulnerability: Eavesdropping on Conversations
https://downrightnifty.me/blog/2022/12/26/hacking-google-home.html#poc-1-spy-on-victim

#Malware_analysis
1. Dimorf - ransomware using 256-bit AES with a self-destructing, randomly generated key for Linux OS´s
https://github.com/Ort0x36/Dimorf
2. TTPs: Rust vs C++
A comparative analysis of C++ and Rust implant binaries
https://steve-s.gitbook.io/0xtriboulet/ttps/ttps-rust-vs-c++

#tools
#reversing
Whole-Program Reverse Engineering with GPT-3
https://github.com/moyix/gpt-wpre

#tools
#Red_Team_Tactics
1. DROPS - Adversary Tool Command Generator / "Dynamic Cheat Sheet"
https://sygnialabs.github.io/DROPS
2. ScrapPY - utility for scraping manuals, documents, and other sensitive PDFs to generate targeted wordlists that can be utilized by offensive security tools
https://github.com/RoseSecurity/ScrapPY
3. Rust reflective loader
https://github.com/winsecurity/Offensive-Rust/tree/main/peloader64

#exploit
1. Buffer overflow exploit for Stephen Bradshaw's Vulnserver
https://github.com/shodanwashere/badserver

2. CVE-2022-20951:
Cisco BroadWorks CommPilot Application Software Unauthenticated SSRF
https://www.shielder.com/advisories/cisco-broadworks-commpilot-ssrf

3. CVE-2022-20958:
Cisco BroadWorks CommPilot Application Software Authenticated RCE
https://www.shielder.com/advisories/cisco-broadworks-commpilot-authenticated-remote-code-execution

#WebApp_Security
1. Backdoor .NET applications via startup hooks
https://rastamouse.me/net-startup-hooks
2. Teler-waf - Go HTTP middleware that provide teler IDS functionality to protect against web-based attacks and improve the security web applications
https://github.com/kitabisa/teler-waf

#Malware_analysis
1. The Mac Malware of 2022
https://objective-see.org/blog/blog_0x71.html
2. New version of Raspberry Robin
https://www.securityjoes.com/post/raspberry-robin-detected-itw-targeting-insurance-financial-institutes-in-europe

#exploit
#reversing
1. Vulnerability in Synology NAS
https://paper.seebug.org/2038
2. Reverse Engineering and Exploiting an IoT TotoLink N100RE bug
https://faradaysec.com/faraday-ctf-2022-write-up-reverse-engineering-and-exploiting-an-iot-bug
3. ESI Injection PoCs
https://infosecwriteups.com/exploring-the-world-of-esi-injection-b86234e66f91

#Sec_code_review
OWASP Mobile Application Security Testing Guide (MASTG)
https://github.com/OWASP/owasp-mastg

#tools
#Malware_analysis
VBScript & VBA source-to-source deobfuscator with partial-evaluation
https://github.com/airbus-cert/vbSparkle

#Offensive_security
1. Google Hacking Database (GHDB)
https://github.com/readloud/Google-Hacking-Database-GHDB
2. NTP Fingerprinting
https://isc.sans.edu/diary/Its+about+time+OS+Fingerprinting+using+NTP/29394
3. Powershell scripts for post exploitation
https://github.com/ItsCyberAli/PowerMeUp

#Research
"EarSpy: Spying Caller Speech and Identity through Tiny Vibrations of Smartphone Ear Speakers", 2022.

#tools
#Blue_Team_Techniques
1. DeTT&CT: Automate your detection coverage with dettectinator
https://blog.nviso.eu/2023/01/04/dettct-automate-your-detection-coverage-with-dettectinator
]-> Python library to DeTT&CT YAML files:
https://github.com/siriussecurity/dettectinator
2. Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data
https://github.com/montysecurity/InfraHunter

#Malware_analysis
1. Unpacking RedLine Stealer
https://dr4k0nia.github.io/posts/Unpacking-RedLine-Stealer
2. String Obfuscation The Malware Way
https://dr4k0nia.github.io/posts/String-Obfuscation-The-Malware-Way