i really like malware

Zero Day Ransomware vs Popular Antivirus and EDR

@GoSecurity
#raas #ransomware #malware #edr #Av

CVE-2026-21508 - Windows LPE via arbitrary COM object initialization

The vulnerability essentially works by forcing a process running as system and that uses the undocumented function Windows_Storage!_SHCoCreateInstance, to create an arbitrary COM object of our choice. For this to happen the object must be associated with an already registered COM class that supports CLSCTX_INPROC_SERVER. Arbitrary COM object creation is archived by manipulating a CoCreateInstance call first argument

@GoSecurity
#CVE #LPE #DFIR #blueteam

A custom Linux beacon for Cobalt Strike

While official Cobalt Strike does not natively support generating Linux beacons, the author says that it is possible to build custom implants for Cobalt Strike on virtually any platform. The only requirement is that the implant communicates correctly with the teamserver

https://github.com/EricEsquivel/CobaltStrike-Linux-Beacon

@GoSecurity
#dfir #blueteam #threathunting #c2 #redteam #cobalt

A comprehensive systems programming toolkit implementing low-level concepts in C, from memory management to OS internals. Features practical implementations of computer architecture concepts with a focus on performance and hardware interaction.

https://github.com/mohitmishra786/BitsAndBytes

@GoSecurity
#C #toolkit #memory

Hello

I have collected more malware. It's like, ... 200,000 malware, I think. I don't know. I've stopped counting.

It is enough malware for your friends, family, extended family, neighbors, and co-workers.

Please download it. The malware is lonely.

https://vx-underground.org/Updates

درود به همه🌹
خواستم بگم خودتونو دست کم نگیرید و خودتونو نبازید، ادامه بدید و مطمئن باشید یه روزی یه اتفاق مثبت میفته و مسیر زندگی‌تون تغییر خواهد کرد.
الان در برهه‌ایی از تاریخ هستیم که تقریبا یادگیری و آموزش به حداقل‌ترین حالت خودش رسیده، سعی کنید خودتونو اپدیت نگه دارید و چیزای جدید یادبگیرید.

ارادت❤️

اطلاعاتی راجب بدافزار FAST 16 که برای آسیب زدن به برنامه هسته‌ایی ایران ساخته شده رو میتونید از توییتر آقای حمید کشفی بخونید.

https://x.com/hkashfi/status/2055756694387335420?s=46

#fast16 #malware #iran
@GoSecurity