a very rough work-in-progress adventure into learning nim by cobbling resources together to create a shellcode loader that implements common EDR/AV evasion techniques. This is a mess and is for research (https://www.kitploit.com/search/label/Research) purposes only! Please don't expect it to compile and run without your own modifications.
Instructions Replace the byte array in loader.nim with your own x64 shellcode Compile the EXE and run it: nim c -d:danger -d:strip --opt:size "loader.nim" Probably adjust which process you want to inject into by looking in the .nim files of the injection (https://www.kitploit.com/search/label/Injection) folder method you're using... Completed Features Direct syscalls (https://www.kitploit.com/search/label/Syscalls) dynamically resolved from NTDLL (Thanks @ShitSecure) AMSI and ETW patching (https://www.kitploit.com/search/label/Patching) (Thanks @byt3bl33d3r) NTDLL unhooking (Thanks @MrUn1k0d3r) CreateRemoteThread injection (Thanks @byt3bl33d3r, @ShitSecure) WIP Features Process Hollowing Technique (Thanks @snovvcrash) Shellcode encryption/decryption using [AES in CTR mode](https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Counter_(CTR) (Thanks @snovvcrash) Replace all compatible API calls with syscalls Add template generator (https://www.kitploit.com/search/label/Generator) and compiler, cmdline args for shellcode, injection methods, process paths, etc. Obfuscation Consider using denim (https://github.com/moloch--/denim) by @LittleJoeTables for obfuscator-llvm nim compilation support! References & Inspiration OffensiveNim by Marcello Salvati (@byt3bl33d3r) NimlineWhispers2 by Alfie Champion (@ajpc500) SysWhispers3 by klezVirus (@KlezVirus) NimPackt-v1 by Cas van Cooten (@chvancooten) unhook_bof.c by Mr. Un1k0d3r (@MrUn1k0d3r) NimGetSyscallStub by S3cur3Th1sSh1t (@ShitSecure) NimHollow by snovvcrash (@snovvcrash) Examples

Download Nim-Loader (https://github.com/adamsvoboda/nim-loader)

INFORMATIX TESTNET COMPETITION QICK GUIDE, 750,000 $INFO tokens up for grabs

Infomatix is a data collection tool that aims to build the worlds most comprehensive financial database through crowd sourced expertise.Continue reading on Medium »
Read more...

hacking: security in practice
Ex-Hackers of Reddit, What is something you saw that made you nope the fuck out?

submitted by /u/Platomik
[link] [comments]

hacking: security in practice
Warzone unlock tool

Been wondering this for a while how is a unlock tool made?

submitted by /u/youtube_tainted
[link] [comments]

hacking: security in practice
can someone hack into your phone using a USB c charging cable?

I did a very stupid thing, I needed a USB c charger and I was searching the store and I only found one random one that was unpackaged and left on the shelf, I had a feeling it looked like bait by hackers

So now I think 1 or 2 so weeks have passed and I find out someone was trying to get into my card, my bank blocked multiple 1p transactions to "PayPal" and advised me to get a new card.

This was so stupid of me, this is the only thing I can relate the suspicious attempt to. Do I have to get a new phone or is it enough to throw away/destroy the cable

submitted by /u/zooseed22
[link] [comments]

hacking: security in practice
I’m being bullied online

This started about a month ago. This person has been dming me all types of hate full things. This person is full of racism and hate. I know that I know this person irl just because of the things that they said. I would love to expose them for what they have done and said. It’s not okay to hide behind a screen and do things like this. If anyone has any tips or knows what to do please help me out!

submitted by /u/1Buck2Buck
[link] [comments]

hacking: security in practice
Missing Niece

I need help and the cops aren’t working fast enough. I need to ping her Instagram or hack into her Snapchat. She’s been gone for 13 days I can’t take this anymore I’m desperate.

submitted by /u/sweetsarajupiter
[link] [comments]

hacking: security in practice
Got my PSN stolen

So my account was stolen and the guy who did it bougth a game so id like to now if there is anyway i could track him or get his identity, and go to the police with it, he changed my e-mail and It shows It was done in a city of my country.

submitted by /u/NerveReap
[link] [comments]

INFORMATIX TESTNET COMPETITION QICK GUIDE, 750,000 $INFO tokens up for grabs
https://airdropeveryday77.medium.com/informatix-testnet-competition-qick-guide-750-000-info-tokens-up-for-grabs-f0dcfd1f1841?source=rss------bug_bounty-5

Infomatix is a data collection tool that aims to build the worlds most comprehensive financial database through crowd sourced expertise.Continue reading on Medium » (https://airdropeveryday77.medium.com/informatix-testnet-competition-qick-guide-750-000-info-tokens-up-for-grabs-f0dcfd1f1841?source=rss------bug_bounty-5)

HDX (Headline Crypto) INCENTIVIZED TESTNET QUICK GUIDE, WITH 250,000 $HDX AS REWARDS
https://airdropeveryday77.medium.com/hdx-headline-crypto-incentivized-testnet-quick-guide-with-250-000-hdx-as-rewards-fb77ca09e70d?source=rss------bug_bounty-5

HEADLINE Crypto is a Texas-based blockchain project and token from the team behind AlgoPay, AlgoCloud, Vaults Protocol, FORUM, PIPELINE-UI…Continue reading on Medium » (https://airdropeveryday77.medium.com/hdx-headline-crypto-incentivized-testnet-quick-guide-with-250-000-hdx-as-rewards-fb77ca09e70d?source=rss------bug_bounty-5)

Hacking on Medium
Buffer overflows

https://cdn-images-1.medium.com/max/728/1*7C-NuMy0WOtp1268ifXkAw.jpeg
Anatomy of memory

Continue reading on Medium »

Hacking on Medium
Crypto-Bridge Hacks: The Billion Dollar Problem

https://cdn-images-1.medium.com/max/600/1*R-nLB9YHeE6d3DCpWrUReg.png
Over the past year $1.1 billion in cryptocurrencies has been looted by hackers, including the biggest heists in blockchain history by…

Continue reading on Medium »