HackerOne
9.81K subscribers
633 photos
30 videos
76 files
2.69K links
Community : @Sec0x01
@Bug0x
Admin : @Offensive
Download Telegram
HideProcess

A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager

https://blog.landhb.dev/posts/v9eRa/a-basic-windows-dkom-rootkit-pt-1/
https://github.com/landhb/HideProcess
#windows #persistence #redteaming #evasion
StreamDivert: Relaying (specific) network connections

The first part of this blog will be the story of how this tool found it’s way into existence, the problems we faced and the thought process followed. The second part will be a more technical deep dive into the tool itself, how to use it, and how it works.

https://research.nccgroup.com/2020/09/10/streamdivert-relaying-specific-network-connections/
#redteaming #windows #tools
Hidden parameters discovery suite written in Rust.

Features:

A lot of things to customize: key template, value template, encodings, and even injection points.

Supports 6 main methods: GET, POST, PUT, PATCH, DELETE, HEAD.

Has built in 2 main body types: json, urlencode.

Able to discover parameters with not random value, like admin=true

Compares responses line-by-line.
Adds to every request cachebuster by default.

#Rust #CTF #redteaming #parameters #web

https://github.com/Sh1Yo/x8