“CISSP and Business Continuity & Disaster Recovery Planning Ensuring Resilience”
https://medium.com/@Land2Cyber/cissp-and-business-continuity-disaster-recovery-planning-ensuring-resilience-a29251b124a0?source=rss------bug_bounty-5

In the realm of cybersecurity, the Certified Information Systems Security Professional (CISSP) certification stands as a beacon of…Continue reading on Medium » (https://medium.com/@Land2Cyber/cissp-and-business-continuity-disaster-recovery-planning-ensuring-resilience-a29251b124a0?source=rss------bug_bounty-5)

“CISSP Concentrations Exploring Specialized Areas in Information Security”

The Certified Information Systems Security Professional (CISSP) certification is widely recognized as a pinnacle achievement in the field…Continue reading on Medium »
Read more...

“CISSP and Business Continuity & Disaster Recovery Planning Ensuring Resilience”

In the realm of cybersecurity, the Certified Information Systems Security Professional (CISSP) certification stands as a beacon of…Continue reading on Medium »
Read more...

Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 3

Cracking the Code: A Beginner’s Guide to Decoding Android AppsContinue reading on Medium »
Read more...

LightsOut - Generate An Obfuscated DLL That Will Disable AMSI And ETW
http://www.kitploit.com/2023/11/lightsout-generate-obfuscated-dll-that.html

LightsOut will generate an obfuscated DLL that will disable AMSI & ETW while trying to evade AV. This is done by randomizing all WinAPI functions used, xor encoding (https://www.kitploit.com/search/label/Encoding) strings, and utilizing basic sandbox checks. Mingw-w64 is used to compile the obfuscated C code into a DLL that can be loaded into any process where AMSI or ETW are present (i.e. PowerShell). LightsOut is designed to work on Linux systems with python3 and mingw-w64 installed. No other dependencies are required.
Features currently include: XOR encoding for strings WinAPI function name randomization Multiple sandbox check options Hardware breakpoint bypass option _______________________
| |
| AMSI + ETW |
| |
| LIGHTS OUT |
| _______ |
| || || |
| ||_____|| |
| |/ /|| |
| / / || |
| /____/ /-' |
| |____|/ |
| |
| @icyguider |
| |
| RG|
`-----------------------'
usage: lightsout.py [-h] [-m ] [-s ] [-sa ] [-k ] [-o ] [-p ]

Generate an obfuscated DLL that will disable AMSI & ETW

options:
-h, --help show this help message and exit
-m , --method
Bypass technique (Options: patch, hwbp, remote_patch) (Default: patch)
-s , --sandbox &lt ;option>
Sandbox evasion technique (Options: mathsleep, username, hostname, domain) (Default: mathsleep)
-sa , --sandbox-arg
Argument for sandbox evasion technique (Ex: WIN10CO-DESKTOP, testlab.local)
-k , --key
Key to encode strings with (randomly generated by default)
-o , --outfile
File to save DLL to

Remote options:
-p , --pid
PID of remote process to patch
Intended Use/Opsec Considerations This tool was designed to be used on pentests, primarily to execute malicious powershell (https://www.kitploit.com/search/label/PowerShell) scripts without getting blocked by AV/EDR. Because of this, the tool is very barebones and a lot can be added to improve opsec. Do not expect this tool to completely evade detection by EDR. Usage Examples You can transfer the output DLL to your target system and load it into powershell various ways. For example, it can be done via P/Invoke with LoadLibrary:

Or even easier, copy powershell to an arbitrary location and side load the DLL!

Greetz/Credit/Further Reference: @RastaMouse (https://twitter.com/_RastaMouse) for their blog post on patching (https://www.kitploit.com/search/label/Patching) AMSI: https://rastamouse.me/memory-patching-amsi-bypass/ @CCob/EthicalChaos (https://twitter.com/_EthicalChaos_) for their blog post on patchless AMSI bypasses via hardware (https://www.kitploit.com/search/label/Hardware) breakpoints: https://ethicalchaos.dev/2022/04/17/in-process-patchless-amsi-bypass/ @rad9800 (https://twitter.com/rad9800) for their code which this tool uses to bypass AMSI and ETW with hardware breakpoints: https://github.com/rad9800/misc/tree/main/hooks

Download LightsOut (https://github.com/icyguider/LightsOut)

Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 3
https://medium.com/@hackersdump0/diving-deep-a-comprehensive-guide-to-android-penetration-testing-part-3-99e86d021190?source=rss------bug_bounty-5

Cracking the Code: A Beginner’s Guide to Decoding Android AppsContinue reading on Medium » (https://medium.com/@hackersdump0/diving-deep-a-comprehensive-guide-to-android-penetration-testing-part-3-99e86d021190?source=rss------bug_bounty-5)

“Ethics and Professional Conduct in CISSP Upholding the Highest Standards”

In the dynamic field of cybersecurity, the Certified Information Systems Security Professional (CISSP) certification stands as a symbol of…Continue reading on Medium »
Read more...

23.6 Lab: Insecure direct object references | 2023

This lab stores user chat logs directly on the server’s file system, and retrieves them using static URLs. Solve the lab by finding the…Continue reading on Medium »
Read more...

Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 4

Android Insights Revealed: Navigating Data Networks and Mastering Hooking StrategiesContinue reading on Medium »
Read more...

“Ethics and Professional Conduct in CISSP Upholding the Highest Standards”
https://medium.com/@Land2Cyber/ethics-and-professional-conduct-in-cissp-upholding-the-highest-standards-845aa1f9081e?source=rss------bug_bounty-5