Ｓｅｃ Ｎｏｔｅ
Will Valid for a week https://t.me/+_wabY9aYJio0MmNk
This group is built for practical, hands-on work in offensive and defensive security. It focuses on real-world activities such as bypass techniques, security research, tool development, red teaming and blue teaming, reverse engineering, and other related technical operations.
Members are expected to stay strictly on-topic and maintain a professional standard of discussion. Only relevant technical conversations are allowed, and all participation should be aligned with active work in these areas.
If you are involved in this kind of work and want a focused environment for serious discussion, you are welcome to join.
Members are expected to stay strictly on-topic and maintain a professional standard of discussion. Only relevant technical conversations are allowed, and all participation should be aligned with active work in these areas.
If you are involved in this kind of work and want a focused environment for serious discussion, you are welcome to join.
🔥6👾3👍2
Modern Web Application Content Discovery
#web
When testing web applications, discovering what functionality is available is key to finding vulnerabilities. Ideally you want to find as many application pages as possible. You can do this by using web‑crawling or spidering tools to uncover indexed pages, as well as employing forced‑browsing techniques. When doing forced browsing you are looking for pages that are not indexed on the site but still available. Forced-browsing is more useful when the applications user interface (UI) is limited, but even on applications with a large UI, forced-browsing can return webpages that would otherwise not be known.
Recently, I got this question:
"I found a URL that is returning a default homepage, but it has no links or navigation. How do I find out if the application has functionality?”
So, I figured I would write up a quick guide on how I find content in modern web applications.
#web
👾4
APT Organization Research Yearbook (2026 Edition) - Chinese
If it possible for you to translate please dm us
🔥6
Ｓｅｃ Ｎｏｔｅ
Will Valid for a week https://t.me/+_wabY9aYJio0MmNk
Looks like I revoked the link by mistake. Here's a new one.
😁3👾3
2026_06_x33fcon_Bring_Your_Own_Everything_The_Final_Approach.pdf
35.3 MB
2026_06_x33fcon_Bring_Your_Own_Everything_-_The_Final_Approach.pdf
🔥6
Forwarded from ＳｅｃＬｏｇ (Redteam)
Malware - The Misunderstood Industry.pdf
237.5 KB
Malware - The Misunderstood Industry.pdf
🔥7
ＳｅｃＬｏｇ
Malware - The Misunderstood Industry.pdf
This article said everything I had been telling my buddies
👍3🔥1
Forwarded from Malware, Cats and Cryptography
bsidesprishtina-cocomelonc-2026.pdf
10 MB
BSides Prishtina 2026 slides.
Full PoC code will be published in my blog soon. Enjoy!
#conference #hacking #malware #math #physics #programming #threatintel #cybersecurity #research
Full PoC code will be published in my blog soon. Enjoy!
#conference #hacking #malware #math #physics #programming #threatintel #cybersecurity #research
🔥10
Forwarded from Proxy Bar
LACUNA Chain: Ghost Frames Defeat Every Layer of EDR Call-Stack Detection
Original text: “LACUNA Chain: Ghost Frames — defeats all EDR layers of call-stack-based detection” — Mohamed Alzhrani (@0xmaz), 0xmaz.me (Jun 20, 2026). Licensed CC BY 4.0. Tables, code listings, diagrams and figures below are reproduced verbatim with attribution captions.
Executive Summary
Modern endpoint detection has moved its trustworthiness anchor from userland hooks to kernel-mode telemetry:…
https://core-jmp.org/2026/06/lacuna-chain-ghost-frames-defeat-edr-call-stack-detection/
Original text: “LACUNA Chain: Ghost Frames — defeats all EDR layers of call-stack-based detection” — Mohamed Alzhrani (@0xmaz), 0xmaz.me (Jun 20, 2026). Licensed CC BY 4.0. Tables, code listings, diagrams and figures below are reproduced verbatim with attribution captions.
Executive Summary
Modern endpoint detection has moved its trustworthiness anchor from userland hooks to kernel-mode telemetry:…
https://core-jmp.org/2026/06/lacuna-chain-ghost-frames-defeat-edr-call-stack-detection/
👾4
Forwarded from 1N73LL1G3NC3
PhantomCtx
A tool that automates Activation Context hijacking with the objective of loading an arbitrary DLL into the vast majority of signed executables (e.g. Microsoft, Adobe, Mozilla).
The loader is presented as a modern alternative to traditional DLL Hijacking & Sideloading: unlike conventional approaches, it does not require a vulnerable binary. The technique can be performed as long as the target executable resolves a DLL through its Import Address Table (IAT) or, in the worst case, via LoadLibrary without an absolute path.
For a deeper dive into how it works internally and how it evades aggressive EDR solutions, check out the post on my technical blog.
A tool that automates Activation Context hijacking with the objective of loading an arbitrary DLL into the vast majority of signed executables (e.g. Microsoft, Adobe, Mozilla).
The loader is presented as a modern alternative to traditional DLL Hijacking & Sideloading: unlike conventional approaches, it does not require a vulnerable binary. The technique can be performed as long as the target executable resolves a DLL through its Import Address Table (IAT) or, in the worst case, via LoadLibrary without an absolute path.
For a deeper dive into how it works internally and how it evades aggressive EDR solutions, check out the post on my technical blog.
🔥4
AMSI/ETW Evasion for PowerShell, without patching amsi.dll, by manipulating the CLR/JIT and using a Tail Jump patch for ETW 🔥
#etw #amsi
#etw #amsi
👾7
Do you even know what you're bypassing? Don't be that guy who throws direct syscalls at everything and calls it an AV bypass.
https://www.hackmosphere.fr/bypass-windows-defender-antivirus-2025-part-1/
https://www.hackmosphere.fr/bypass-windows-defender-antivirus-2025-part-1/
👍6
Forwarded from Orca Cyber Weapons
Post-Build PE Obfuscation
Obfusk8 includes a post-build script to further harden the compiled binary by removing forensic artifacts.
* Script Location: `Obfusk8/Obfusk8/SCRIPTS/obfuscate_pe.ps1 at main · x86byte/Obfusk8`
* What it does:
1. Strips the Rich Header — removes the MSVC build-environment fingerprint that reveals compiler version and toolchain details.
2. Spoofs the TimeDateStamp — replaces the PE header timestamp with a fixed value to obscure build time.
3. Clears the Debug Directory — wipes debug directory entries that could leak PDB paths or build metadata.
* Usage:
Run as a post-build step after compiling:
The script modifies the binary in-place. No backup is created.
@OrcaCyberWeapons
Obfusk8 includes a post-build script to further harden the compiled binary by removing forensic artifacts.
* Script Location: `Obfusk8/Obfusk8/SCRIPTS/obfuscate_pe.ps1 at main · x86byte/Obfusk8`
* What it does:
1. Strips the Rich Header — removes the MSVC build-environment fingerprint that reveals compiler version and toolchain details.
2. Spoofs the TimeDateStamp — replaces the PE header timestamp with a fixed value to obscure build time.
3. Clears the Debug Directory — wipes debug directory entries that could leak PDB paths or build metadata.
* Usage:
Run as a post-build step after compiling:
powershell PowerShell -NoProfile -ExecutionPolicy Bypass -File Obfusk8/SCRIPTS/obfuscate_pe.ps1 -Path "path\to\Obfusk8.exe"The script modifies the binary in-place. No backup is created.
@OrcaCyberWeapons
GitHub
GitHub - x86byte/Obfusk8: Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries
Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries - x86byte/Obfusk8
🔥4
Forwarded from Orca Cyber Weapons
We’re building a small community around binary security research, focused on things like:
- Reverse Engineering
- Binary Obfuscation / Deobfuscation
- Exploit Development
- Compiler / interpreters...
- Malware Analysis
- Binary Hardening research
we also work on open source tools and experiments here:
GitHub → BinaryHardening GitHub
Discord → BinaryHardening Discord
If low level stuff and weird binaries are ur thing, come join us
Always happy to meet more RE people
- Reverse Engineering
- Binary Obfuscation / Deobfuscation
- Exploit Development
- Compiler / interpreters...
- Malware Analysis
- Binary Hardening research
we also work on open source tools and experiments here:
GitHub → BinaryHardening GitHub
Discord → BinaryHardening Discord
If low level stuff and weird binaries are ur thing, come join us
Always happy to meet more RE people
🔥2
SpotifyC2 — Cloud-Based Command Channel Research
Execute commands through a Spotify playlist and receive command output through Telegram.
#c2
Execute commands through a Spotify playlist and receive command output through Telegram.
#c2
😁11