Hi mates! This writeup is intended to showcase the following:Continue reading on Medium » (https://medium.com/@thewolfsec/ssti-bypass-using-crlf-1337-up-ctf-smarty-pants-4ee8e1a72f98?source=rss------bug_bounty-5)

“CISSP and Security Operations Orchestrating Incident Response and Recovery”
https://medium.com/@Land2Cyber/cissp-and-security-operations-orchestrating-incident-response-and-recovery-0541469d1ed7?source=rss------bug_bounty-5

In the dynamic landscape of cybersecurity, the Certified Information Systems Security Professional (CISSP) certification stands as a…Continue reading on Medium » (https://medium.com/@Land2Cyber/cissp-and-security-operations-orchestrating-incident-response-and-recovery-0541469d1ed7?source=rss------bug_bounty-5)

“CISSP Concentrations Exploring Specialized Areas in Information Security”
https://medium.com/@Land2Cyber/cissp-concentrations-exploring-specialized-areas-in-information-security-88bd05a39da2?source=rss------bug_bounty-5

The Certified Information Systems Security Professional (CISSP) certification is widely recognized as a pinnacle achievement in the field…Continue reading on Medium » (https://medium.com/@Land2Cyber/cissp-concentrations-exploring-specialized-areas-in-information-security-88bd05a39da2?source=rss------bug_bounty-5)

“CISSP and Business Continuity & Disaster Recovery Planning Ensuring Resilience”
https://medium.com/@Land2Cyber/cissp-and-business-continuity-disaster-recovery-planning-ensuring-resilience-a29251b124a0?source=rss------bug_bounty-5

In the realm of cybersecurity, the Certified Information Systems Security Professional (CISSP) certification stands as a beacon of…Continue reading on Medium » (https://medium.com/@Land2Cyber/cissp-and-business-continuity-disaster-recovery-planning-ensuring-resilience-a29251b124a0?source=rss------bug_bounty-5)

“CISSP Concentrations Exploring Specialized Areas in Information Security”

The Certified Information Systems Security Professional (CISSP) certification is widely recognized as a pinnacle achievement in the field…Continue reading on Medium »
Read more...

“CISSP and Business Continuity & Disaster Recovery Planning Ensuring Resilience”

In the realm of cybersecurity, the Certified Information Systems Security Professional (CISSP) certification stands as a beacon of…Continue reading on Medium »
Read more...

Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 3

Cracking the Code: A Beginner’s Guide to Decoding Android AppsContinue reading on Medium »
Read more...

LightsOut - Generate An Obfuscated DLL That Will Disable AMSI And ETW
http://www.kitploit.com/2023/11/lightsout-generate-obfuscated-dll-that.html

LightsOut will generate an obfuscated DLL that will disable AMSI & ETW while trying to evade AV. This is done by randomizing all WinAPI functions used, xor encoding (https://www.kitploit.com/search/label/Encoding) strings, and utilizing basic sandbox checks. Mingw-w64 is used to compile the obfuscated C code into a DLL that can be loaded into any process where AMSI or ETW are present (i.e. PowerShell). LightsOut is designed to work on Linux systems with python3 and mingw-w64 installed. No other dependencies are required.
Features currently include: XOR encoding for strings WinAPI function name randomization Multiple sandbox check options Hardware breakpoint bypass option _______________________
| |
| AMSI + ETW |
| |
| LIGHTS OUT |
| _______ |
| || || |
| ||_____|| |
| |/ /|| |
| / / || |
| /____/ /-' |
| |____|/ |
| |
| @icyguider |
| |
| RG|
`-----------------------'
usage: lightsout.py [-h] [-m ] [-s ] [-sa ] [-k ] [-o ] [-p ]

Generate an obfuscated DLL that will disable AMSI & ETW

options:
-h, --help show this help message and exit
-m , --method
Bypass technique (Options: patch, hwbp, remote_patch) (Default: patch)
-s , --sandbox &lt ;option>
Sandbox evasion technique (Options: mathsleep, username, hostname, domain) (Default: mathsleep)
-sa , --sandbox-arg
Argument for sandbox evasion technique (Ex: WIN10CO-DESKTOP, testlab.local)
-k , --key
Key to encode strings with (randomly generated by default)
-o , --outfile
File to save DLL to

Remote options:
-p , --pid
PID of remote process to patch
Intended Use/Opsec Considerations This tool was designed to be used on pentests, primarily to execute malicious powershell (https://www.kitploit.com/search/label/PowerShell) scripts without getting blocked by AV/EDR. Because of this, the tool is very barebones and a lot can be added to improve opsec. Do not expect this tool to completely evade detection by EDR. Usage Examples You can transfer the output DLL to your target system and load it into powershell various ways. For example, it can be done via P/Invoke with LoadLibrary:

Or even easier, copy powershell to an arbitrary location and side load the DLL!

Greetz/Credit/Further Reference: @RastaMouse (https://twitter.com/_RastaMouse) for their blog post on patching (https://www.kitploit.com/search/label/Patching) AMSI: https://rastamouse.me/memory-patching-amsi-bypass/ @CCob/EthicalChaos (https://twitter.com/_EthicalChaos_) for their blog post on patchless AMSI bypasses via hardware (https://www.kitploit.com/search/label/Hardware) breakpoints: https://ethicalchaos.dev/2022/04/17/in-process-patchless-amsi-bypass/ @rad9800 (https://twitter.com/rad9800) for their code which this tool uses to bypass AMSI and ETW with hardware breakpoints: https://github.com/rad9800/misc/tree/main/hooks

Download LightsOut (https://github.com/icyguider/LightsOut)