ar, my house, filed police reports and counter reports and will be building my case to file a Federal lawsuit. One of the perpetrators, who ripped out my front bumper of my car, has been arrested.
5. A private project involving interaction with the CoinGeckoAPI
6. Running the cryptoscopeinitiative.org, a to-be-filed 501c3 Non-Profit Organization
7. Teaching three online classes on Exploit Development Upcoming update! Direct encrypted shellcode execution! (Implemented in test versions, not released yet)I need a bit of help, because I successfully implemented CGO to execute encrypted shellcode but it is throwing memory access violations exit status 0xc0000005. It shouldn't be anything related to DEP (Data Execution Prevention) because the file CGOTest/working-template-shellcode-executor.go did run.

Problem Discovered

As it turns out, VirtualAlloc must be called from kernel32.dll and ntdll.dll to properly make the memory page where the shellcode lands, readable, writable, and executable, in other word, set the PAGE_EXECUTE_READWRITE to ON. Read the Note on Memory Access Violation Problem below. https://blogger.googleusercontent.com/img/a/AVvXsEjCtXeL5Ouk9O0lOBqjggneyIJgfdlFyyehCTS9qlkP9fdZJkvxkw_haXjJ_u0YU_tuNLZqFyQltLOP_O1NGSKKR1BrFflUWh6GLFGpQIvAbqXjGlSvW-SFCioprlrTBvU-FoO2I-yCtldc2dqz6UJerQOR-Nb0WUyOtnScaS_VgNVL3LvFVKvC5AOLyA=w640-h360 Once I figure this out, CGO was a pain in the ass to implement, we can now create crypters that execute INLINE-ASSEMBLY. Which was considered a impossibility until now.

Note this requires Golang and the MinGW toolchain to be installed on Windows with you running and generating the shellcode on Windows. The reason why, is because CGO cannot be cross-compiled like our other EXOCET modules. To install the toolchain you need to go to https://www.msys2.org/ and follow the guide. Then you must add gcc to your environment variables in Windows https://blogger.googleusercontent.com/img/a/AVvXsEg7IVkVCjD01e4C26aIwL3FruCk9TcPYgPo7XiKDMzU_lniSisirBOFc2-LxTnPYNoa7oZFYivhmRXSVsxmN3w90GderHWT51_pvKNja1b7PPHXf1wCed8fy7sLLpk6RDXfE1k5JoBnhySxvozawI_S_2ccY7ELtYw9vOQNsoH6wfcl9JIdinlRqx_pEQ=w640-h360 Step 1: Generate shellcode, this could be from msfvenom Meterpreter payloads, Cobalt Strike Beacons, or your own custom shellcode in C compatible format https://blogger.googleusercontent.com/img/a/AVvXsEgWeogDQyl_TqNOeTaY6cFMa4UHZkXAxitcW46n82XE3jJEi3x7L_t0Fy6uPKGUiQ16NK66pKPHo_BY0Bz3Xfs9ps5WDcSlFekVlr0b3UyxQ73pbyYIv8_Td-SqC-c2NqYJAMFAcokDUggNsBfGc-FmC5ssA4n5jdwABwFmYiRihjQhINDH5BsTSRKqmQ=w640-h360 Step 2: Copy only the bytes of the shellcode, excluding the quotes into a text file like sc.txt https://blogger.googleusercontent.com/img/a/AVvXsEhd4MVspipJUXVPIjWxYIBcPICYW3tbwvl9ryv04dIMZrGM31KTZdcSXM6-F7gm86oysb4kZkspOZr8j38pY9k17kCERLY_9bJ_uzXGnvJXwjpdexnA7VsB1fUMcnW703IHNwgc_PKxPLbAffc9EIZ-3I9W5AjN614PejX6TTxw2tkolwk1qzLuRHB4fw=w640-h360 Step 3: Your shellcode file should look like this. Raw shellcode https://blogger.googleusercontent.com/img/a/AVvXsEh44Xxm_y2utbPAskWo_B0rXZVTUPtFAu0o1NCczfp9AIhmXiR_EhDz8ssRj59Gv2lFSTlXZdUdf8tIqYBd6a104g2bPOB2QfUepoiVu0bVk1io_mFXcUFnlsX-rMP3iUF9iw0XA9gZ1S4QMvjH-0lXsFCejrc5g3sZCe8UfkL4SQxO7vPjphRqrogMXA=w640-h360 Step 4: Now run the command go run exocet-shellcode-exec.go sc.txt shellcodetest.go KEYStep 5: You can attempt to run it but you'll run into memory access violation errors for some reason, which I am still working on Note on Memory Access Violation ProblemApparently, aside from the major limitations of CGO that prohibit or dramatically frustrates cross-compilation, the issue is that the shellcode we want to execute is landing in a section of memory (analyzed in WinDBG x64) that is not RWX. In other words, unless we write C code that explicitly allows execution in memory of the shellcode, it will always throw access violation errors.

The other method, that I observed other developers of rudimentary Go modules https://gist.github.[...]

com/mgeeky/bb0fd5652b234fbd1c7630d7e5c8542d, is that they use Go's Windows API to interact with ntdll.dll and kernel32.dll to call VirtualAlloc and specify areas of RWX memory pages. This method works better, but it seems that the shellcode must be in num-transformed format only for it to work.

I am still working on this you guys. I may combine multiple programming languages together to write a proper shellcode execution module Note on Apple M1 Chips for precompiled binariesUnfortunately I am running into errors for making a pre-compiled binary for MacBooks running the new M1 CPUs. It may be a issue with my Golang installation ┌──(root💀kali)-[/opt/EXOCET-AV-Evasion]
└─# GOOS=darwin GOARCH=arm64 go build exocet.go
# command-line-arguments
/usr/lib/go-1.15/pkg/tool/linux_amd64/link: running gcc failed: exit status 1
/tmp/go-link-477718799/go.o: file not recognized: file format not recognized
collect2: error: ld returned 1 exit status Either way, you still require Golang to compile or cross-compile the malware to the platform you are targeting. Download EXOCET-AV-Evasion

Dark Reading: Attacks/Breaches
Name That Toon: Cubicle for Four

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Dark Reading: Attacks/Breaches
FBI Attributes Abuse of Its Email Account to Software 'Misconfiguration'

A wave of phony emails from an FBI mail server originated from an issue with the agency's Law Enforcement Enterprise Portal.

Dark Reading: Attacks/Breaches
Norton Special Report Reveals Nearly 1 in 2 Gamers Have Experienced a Cyberattack

Three in four say they were impacted financially as a result, losing more than $700 on average.

Hacking on Medium
Unknowndevice64–1: Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/844/0*McFn0ncejOADe1VK.png
Merhabalar,

Continue reading on Medium »

Hacking on Medium
Yapay Zeka Güvenliği : Giriş

https://cdn-images-1.medium.com/max/1080/1*OIW9tAXZgQDNTRT_-we3Aw.jpeg
Yapay Zeka Güvenliği (AI Security) : Giriş

Continue reading on Medium »

Hacking on Medium
Qu’est-ce que Profit Hacking ?

Un “hacker” est une personne qui a une connaissance approfondie du système et sait comment exploiter les faiblesses. Et lorsqu’il s’agit…

Continue reading on Medium »

Learn PPP, EDD & and other valid methods with SwipeClub. Vendor + Groupchat
https://www.reddit.com/r/redteamsec/comments/quvi14/learn_ppp_edd_and_other_valid_methods_with/

<!-- SC_OFF -->https://t.me/joinchat/3tS7h00sp15hODc5 <!-- SC_ON --> submitted by /u/TiePositive8228 (https://www.reddit.com/user/TiePositive8228)
[link] (https://www.reddit.com/r/redteamsec/comments/quvi14/learn_ppp_edd_and_other_valid_methods_with/) [comments] (https://www.reddit.com/r/redteamsec/comments/quvi14/learn_ppp_edd_and_other_valid_methods_with/)

Broken Authentication through referral code.
https://hector0x.medium.com/broken-authentication-through-referral-code-25cd0e8bccc2?source=rss------bug_bounty-5

Hey all,Continue reading on Medium » (https://hector0x.medium.com/broken-authentication-through-referral-code-25cd0e8bccc2?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
3 Must-Know Technologies to Protect Your Hybrid Workforce

Zero-trust, SASE, and XDR have similar goals, but they differ in their approaches to protecting businesses and users.

Dark Reading: Attacks/Breaches
8 Tips To Keep in Mind for Ransomware Defense

Ransomware is everywhere, including the nightly news. Most people know what it is, but how do ransomware attackers get in, and how can we defend against them?

Dark Reading: Attacks/Breaches
MacOS Zero-Day Used in Watering-Hole Attacks

Attackers targeted Chinese pro-democracy groups using a vulnerability fixed in September along with a second vulnerability fixed early in the year, Google says.