hacking: security in practice
Uncommon/Unique malware evasion techniques?

I’m in the final stages of developing a Crypter at the moment. It’s sitting at 0/38 Scantime and 1/22 Runtime.

I have anti-VM features implemented which do standard checks on storage, ram, and CPU queries.

What other AV evasion techniques / anti debug features have you heard of?

The current list of features are as follows:

Polymorphic Encrypted Strings

Strings that would be constant within the stub are encrypted with a polymorphic encryption scheme so that the injected strings are different upon each build.

No decryption key in the “Stub”

The decryption key is not passed to the stub. Instead, a charset and length is passed along to be brute-forced at run. (Bypass some runtime AV; harder for reversing)

Randomized Code Blocks

Code Blocks / Subs&Functions are randomized in their placement when the assembly is crypted.

Legitimate Workstation Checks

At run, the program utilizes 3 check points to verify it is being run on a legitimate machine and not a virtualized environment.

Memory Execution

The crypted file is run directly in memory via a background thread.

Service Startup

The crypted file runs as a windows service until the injected bytes are run into memory.

Compression

The payload is compressed before being Injected into the stub, this sometimes provides outputs smaller than the stub+original payload.

Obfuscation

Using Mono.cecil, the assembly is lightly obfuscated using renaming techniques paired with invalid whitespace characters.

Only one static variable

Entire integer,string,array is dynamically changed each build with exception to one integer that is a divisor for bytes. A common number that would not be marked as malicious.

Small Stub

Only 12kb total size.

submitted by /u/MysticalTeamMember
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Whatsapp does not require OTP

NOTE: This finding was declared as feature by Facebook team so i would like to share this new feature with everyone.Continue reading on Medium »
Read more...

Whatsapp does not require OTP
https://sheshasai.medium.com/whatsapp-does-not-require-otp-794f94e0d62b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

NOTE: This finding was declared as feature by Facebook team so i would like to share this new feature with everyone.Continue reading on Medium » (https://sheshasai.medium.com/whatsapp-does-not-require-otp-794f94e0d62b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I got my first HOF in United Nations | 0xshahriar

This is the story about getting my first Hall Of Fame. And I got it in United Nations. 🎉🎊Continue reading on Medium »
Read more...

Moving from Web application to Mobile pentesting.
https://www.reddit.com/r/Pentesting/comments/tvuuac/moving_from_web_application_to_mobile_pentesting/

Hello, I've been moving from web app pentesting to mobile soon and have no clue what to do. Can you guys share any materials or tips? So far I've found the OWASP-MSTG. Somewhere I've read that I should use some proxies and wireshark and stuff but can't paint the large picture. Thanks! submitted by /u/tryingtoworkatm (https://www.reddit.com/user/tryingtoworkatm)
[link] (https://www.reddit.com/r/Pentesting/comments/tvuuac/moving_from_web_application_to_mobile_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/tvuuac/moving_from_web_application_to_mobile_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video

How I got my first HOF in United Nations | 0xshahriar
https://0xshahriar.medium.com/how-i-got-my-first-hof-in-united-nations-0xshahriar-381d3dff3a93?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is the story about getting my first Hall Of Fame. And I got it in United Nations. 🎉🎊Continue reading on Medium » (https://0xshahriar.medium.com/how-i-got-my-first-hof-in-united-nations-0xshahriar-381d3dff3a93?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: [Day 7] Web Exploitation Migration Without Security

https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
Interact with the MongoDB server to find the flag. What is the flag?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

2FA… To Bypass

Learn various ways to bypass 2FAContinue reading on Medium »
Read more...

2FA… To Bypass
https://medium.com/@sathvika03/2fa-to-bypass-db2dbd837d7d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Learn various ways to bypass 2FAContinue reading on Medium » (https://medium.com/@sathvika03/2fa-to-bypass-db2dbd837d7d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

HACKED NOKIA WITH REFLECTED CROSS-SITE SCRIPTING VULNERABILITY….
https://amit-lt.medium.com/hacked-nokia-with-reflected-cross-site-scripting-vulnerability-327daa8e62fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, Hackers Welcome to my other write-up of Nokia Hacked with RXSS Vulnerability…Continue reading on Medium » (https://amit-lt.medium.com/hacked-nokia-with-reflected-cross-site-scripting-vulnerability-327daa8e62fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Boopkit: eBPF backdoor (TCP) for spawning reverse shells

https://external-preview.redd.it/DGKq-7tktnmAIB1atAOrnYKOZ3jgMXNOMbEzprs2_9I.jpg?width=640&crop=smart&auto=webp&s=1ac4756fa5bb07603c78f85e3ee9d5b29bd3ff00 submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Scanning IP range with ZMap

Hi! Does anybody have an idea on how to scan a whole IP-range for a specific directory with ZMap?
For example: I want to find IP-addresses that contains "http:///u/kuggu
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video