Ｓｅｃ Ｎｏｔｅ
Will Valid for a week https://t.me/+_wabY9aYJio0MmNk
This group is built for practical, hands-on work in offensive and defensive security. It focuses on real-world activities such as bypass techniques, security research, tool development, red teaming and blue teaming, reverse engineering, and other related technical operations.
Members are expected to stay strictly on-topic and maintain a professional standard of discussion. Only relevant technical conversations are allowed, and all participation should be aligned with active work in these areas.
If you are involved in this kind of work and want a focused environment for serious discussion, you are welcome to join.
Members are expected to stay strictly on-topic and maintain a professional standard of discussion. Only relevant technical conversations are allowed, and all participation should be aligned with active work in these areas.
If you are involved in this kind of work and want a focused environment for serious discussion, you are welcome to join.
🔥6👾3👍2
Modern Web Application Content Discovery
#web
When testing web applications, discovering what functionality is available is key to finding vulnerabilities. Ideally you want to find as many application pages as possible. You can do this by using web‑crawling or spidering tools to uncover indexed pages, as well as employing forced‑browsing techniques. When doing forced browsing you are looking for pages that are not indexed on the site but still available. Forced-browsing is more useful when the applications user interface (UI) is limited, but even on applications with a large UI, forced-browsing can return webpages that would otherwise not be known.
Recently, I got this question:
"I found a URL that is returning a default homepage, but it has no links or navigation. How do I find out if the application has functionality?”
So, I figured I would write up a quick guide on how I find content in modern web applications.
#web
👾4
APT Organization Research Yearbook (2026 Edition) - Chinese
If it possible for you to translate please dm us
🔥6
Ｓｅｃ Ｎｏｔｅ
Will Valid for a week https://t.me/+_wabY9aYJio0MmNk
Looks like I revoked the link by mistake. Here's a new one.
😁3👾3
2026_06_x33fcon_Bring_Your_Own_Everything_The_Final_Approach.pdf
35.3 MB
2026_06_x33fcon_Bring_Your_Own_Everything_-_The_Final_Approach.pdf
🔥6
Forwarded from ＳｅｃＬｏｇ (Redteam)
Malware - The Misunderstood Industry.pdf
237.5 KB
Malware - The Misunderstood Industry.pdf
🔥7
ＳｅｃＬｏｇ
Malware - The Misunderstood Industry.pdf
This article said everything I had been telling my buddies
👍3🔥1
Forwarded from Malware, Cats and Cryptography
bsidesprishtina-cocomelonc-2026.pdf
10 MB
BSides Prishtina 2026 slides.
Full PoC code will be published in my blog soon. Enjoy!
#conference #hacking #malware #math #physics #programming #threatintel #cybersecurity #research
Full PoC code will be published in my blog soon. Enjoy!
#conference #hacking #malware #math #physics #programming #threatintel #cybersecurity #research
🔥10
Forwarded from Proxy Bar
LACUNA Chain: Ghost Frames Defeat Every Layer of EDR Call-Stack Detection
Original text: “LACUNA Chain: Ghost Frames — defeats all EDR layers of call-stack-based detection” — Mohamed Alzhrani (@0xmaz), 0xmaz.me (Jun 20, 2026). Licensed CC BY 4.0. Tables, code listings, diagrams and figures below are reproduced verbatim with attribution captions.
Executive Summary
Modern endpoint detection has moved its trustworthiness anchor from userland hooks to kernel-mode telemetry:…
https://core-jmp.org/2026/06/lacuna-chain-ghost-frames-defeat-edr-call-stack-detection/
Original text: “LACUNA Chain: Ghost Frames — defeats all EDR layers of call-stack-based detection” — Mohamed Alzhrani (@0xmaz), 0xmaz.me (Jun 20, 2026). Licensed CC BY 4.0. Tables, code listings, diagrams and figures below are reproduced verbatim with attribution captions.
Executive Summary
Modern endpoint detection has moved its trustworthiness anchor from userland hooks to kernel-mode telemetry:…
https://core-jmp.org/2026/06/lacuna-chain-ghost-frames-defeat-edr-call-stack-detection/
👾4
Forwarded from 1N73LL1G3NC3
PhantomCtx
A tool that automates Activation Context hijacking with the objective of loading an arbitrary DLL into the vast majority of signed executables (e.g. Microsoft, Adobe, Mozilla).
The loader is presented as a modern alternative to traditional DLL Hijacking & Sideloading: unlike conventional approaches, it does not require a vulnerable binary. The technique can be performed as long as the target executable resolves a DLL through its Import Address Table (IAT) or, in the worst case, via LoadLibrary without an absolute path.
For a deeper dive into how it works internally and how it evades aggressive EDR solutions, check out the post on my technical blog.
A tool that automates Activation Context hijacking with the objective of loading an arbitrary DLL into the vast majority of signed executables (e.g. Microsoft, Adobe, Mozilla).
The loader is presented as a modern alternative to traditional DLL Hijacking & Sideloading: unlike conventional approaches, it does not require a vulnerable binary. The technique can be performed as long as the target executable resolves a DLL through its Import Address Table (IAT) or, in the worst case, via LoadLibrary without an absolute path.
For a deeper dive into how it works internally and how it evades aggressive EDR solutions, check out the post on my technical blog.
🔥4
AMSI/ETW Evasion for PowerShell, without patching amsi.dll, by manipulating the CLR/JIT and using a Tail Jump patch for ETW 🔥
#etw #amsi
#etw #amsi
👾7